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Abstract 

In this paper, we show how to extend the notion of reducibility introduced by Girard for proving the 
termination of /3-reduction in the polymorphic A-calculus, to prove the termination of various kinds of 
rewrite relations on A-terms, including rewriting modulo some equational theory and rewriting with matching 
modulo /377, by using the notion of computability closure. This provides a powerful termination criterion for 
various higher-order rewriting frameworks, including Klop’s Combinatory Reductions Systems with simple 
types and Nipkow’s Higher-order Rewrite Systems. 

Keywords: termination, rewriting, A-calculus, types, Girard’s reducibility, rewriting modulo, matching 
modulo Pr, patterns d la Miller 


1. Introduction 


This paper addresses the problem of checking the termination of various kinds of rewrite relations on 
simply typed A-terms. 

First-order rewriting KBTOl D,T9r)l| and A-calculus GhudCll Bax84| are two general (Turing-complete) 
computational frameworks with different strengths and limitations. 

The A-calculus is a language for expressing arbitrary functions based on a few primitives (abstraction 
over some variable and application of a function to an ar gument) . Computation is done by repeatedly 
substituting formal arguments by actual ones (/3-reduction) 
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In first-order rewriting, one considers a fixed set of function symbols and a fixed set of term transformation 
rules. Co mputati on is done by repeatedly substituting the left-hand side of a rule by the corresponding right- 
hand side KB70|| . 

Hence, in A-calculus, there is only one computation rule and it is unconditional while, in rewriting, a 
computation step occurs only if a term matches a pattern (possibly modulo some equational theory). 

But first-order rewriting cannot express in a simple way anony mous functions or patterns with bound 
variables. See for instance the works on C ombin a tory Logi c ICFSd , first-order definitions of a substitution 
operation compatible with a-equivalence |dB78L ACCL91, iKesOTj (to cite just a few, for the a mount o f 
publications on this subject is very important), or first-order encodings of higher-order rewriting BKR05 |. 

Rewriting on A-terms, or higher-order rewriting, aims a t unify i ng these tw o languages. Several approaches 
exist like Klop’s Combina tory Reduction S ystems (CRSs) |K1 o 8(TI . iKvOvRQ.'i |. Khasidashvili’s Expression Re - 
duction Systems (ERSs) |Kha9nl [CKKn5 1. Nipkow’s Higher-order Rewrite Syster ns (HRSbI lNiD91 . MN98|, 
or Jouannaud and Okada’s higher-order algebraic specification languages iHALsl l,I09lL ,T097al |. Van Oost- 
rom and van Raamsdonk studied the relations between CRSs and H RSs vOvR93l and developed a general 
framework (HORSs) that subsumes most of the previous approaches v094 ^9d| . 


^Hosted from July 2012 to August 2013 by the Institute of Software of the Chinese Academy of Sciences, Beijing, China. 
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In another direction 
Oostrom’s pattern calculus 


so me re s earchers in troduced calculi where patterns ar e first-class citiz ens: van 
KvOdVOS l. Cirstea and Kirchner’s p-calculus CKOla . CKOlbl . Jay and 


_ _ v09nl. _ , 

Kesner’s pattern calculus JavOd j jK09j| . or "some extensions of ML or Haskell |Erw 9fil lTnnnl| . 


In this paper, I will consider HALs with curried symbols {i.e. all symbols are of arity 0), that is, arbitrary 
simply typed A-terms with curried symbols defined by the combination of rewrite rules and ,5-reduction. 
But, as we will see in Section 1531 our results easily apply to HRSs and simply typed CRSs as well. 

My goal is to develop techniques for proving the termination of such a system, i.e. the combination of 
/3-reduction and arbitrary user-defined rewrite rules. 


For proving the termination of rewrite r elations on A-te r ms, one c an try to exte nd to A-calculus techniques 


developed for first-order rewriting {e.g. [LSS9^ lvdP96 , 


■1091 



fkH) or, vice versa, adapt to 


rewriting techniques developed for A-calculus (e.g. 

Since /3-reduction does not terminate in general, one usually restricts his atten tion to some strict subset 
of the set of all A-terms, like the set of A-terms typable in some type system Bar92| (types were first 
introduced by logicians as an alternative to the restriction of the comprehension axiom in set theory, and 
later found important applications in programming languages and compilers). 

To prove the termination of /3-reduction in typed A-calculi, there are essentially three techniques: 

Direct proof. In the simply-typed A-calculus, it is possible to prove the termination of /3-reduction by 
induction on the size of the type of the substituted variable San67 . vD8flj| . For instance, in the reduction 
sequence xy)(\y^z) (\y^z)y z, the type in the first reduction step of the substituted 

variable x is A ^ B while, in the second reduction step (which is generated by the first one), the type of 
the substituted variable y is A. 

But this technique extends neither to polymorphic types nor to rewriting since, in both cases, the type 
of the substituted variables may increase: 

• With polymorphic types, consider the reduction sequence xYy){Aa\y°‘z) (Aa\y°‘z)Yy 

— 1/3 (Xy'^z)y -^p z. In the first reduction step, the type of the substituted variable x is (Va)a B 

while, in the last reduction step, the type of the substituted variable y is the arbitrary type Y. 

• With the rule K a: a -^-ji x where K : T —A —>• T, consider the reduction sequence {XzKxz)a -^p 
Kia X. In the first reduction step, the type of the substituted variable z is A while, in the second 
reduction step which is generated by the first one, the type of the substituted variable x is the arbitrary 
type T. 

Interpretation. For the simply-typed A-calculus again, Gandy showed that A/-terms (A-terms where, in 
every subterm Xx t, x has at least one free occurrence in t), can be interpreted by hereditarily monotone 


functionals on N Gan80l| . Then, van de Pol showed that there is a transformation from A-terms to XI- 


terms that strictly dec reases w hen there is a /3-reduction, and extended this to higher-order rewriting and 
other do mains th an N vdP96|| . Finally, Hamana developed a c ategorica l semantics for terms with bound 
variables HamOfil] based on the work of Fiore, Plotkin and Turi FPT99l| . that is complete for termination 
(which is not the ca se of van de Pol’s interpretations), and extended to h igher-o rder terms the technique 
of semantic labeling Ham07l| introduced for first-order terms by Zantema Zan95l| . However, Roux showed 
that its appl ication to 5-re duction itself is not immediate since the interpretation of /3-reduction is not 
/3-reduction BR09l Roull |. 


Computability. The last technique, not limited to simp ly-typed A-calculus, is based on Tait and Girard’s 


mp r 

notions of computabilitj0 introduced by Tait TaiGTjl for the w eak normalization of the simply- typed 
A-calculus, and extended by Girard to polymorphic types Gir7l| and strong normalization Gir72|. 


^In fact, Tait speaks of “co nvertib ility” and Girard of “reducibility”. To the best of my knowledge, the expression “com¬ 
putability” is due to Troelstra |Tro73|| althou gh Tro elstra himself invokes Tait. This notion of computability has to be distin¬ 
guished from the one of Turing and Church lTur37ll . However, given a Tait-computable A-term t U => V, the function that 
maps every Tait-computable A-term u : U to the normal form of tu is indeed Turing-computable. 
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There are however relations between these techniques. For instance, van de Pol proved that his interpre¬ 
tations on N can be obtained from a computability proof by adding information o n the length of reductions 



Conversely, the author and Roux proved that size-based termination Gim98l AbeOdL BFG+o4 . 


which is a refinement of comput ability , can to some extent be seen as an instance of Hamana’s 


higher-order semantic labeling technique BR09l| . 


In this paper, we will consider a technique based on computability. 

Computability has been first used for proving the termination of the combination of /3-reduction, in 
the simply typed or polymorphic A-calculus, together with a fi rst-order rew rite sys tem that is terminating 
on first-order terms, by Tannen and Callier BTG89I . BTG91| and Okada Oka89l | independently. It was 
noticed later by Dougherty that, wit h first-order rew riting, a proof can be given that is independent of the 
proof of termination of /3-reduction |Dou9ll lDou92l| , because first-order rewriting cannot create /3-redexes 


(but just duplicate them). But this does not extend to higher-order rewriting or to function symbols with 
polym orphic types. 

In |.I09lLlj097aj . Jouannaud and Okada extended computability to hig her-orde r rewrite rules following 
a schema extending Godel’ system T recursion schema on Peano integers G6d58l| to arbitr ary first-order 


data types. This work was then ext ended to Coquand and Huet’s Calculus of Constructions 
in a series of papers culminating in BFG97 |. 


)t p . 

In [J097b|, Jouannaud and Okada reformulated this general schema as an inductively defined set called 


CH84 ICH88l| 


computability clo sure. This notion was then extended with the author to strictly positive inductive types 


BJ0991 lBJO02l| and to the Calculus of Algebraic Constructions, that is an extension of the Calculus of 


Constructions where types equivalent modulo us er-defi ned rewrite rules are identified and function symbols 
can be given polymorphic and dependent types Bla05l| . 


In this paper, we provide a new presentation of the notion of computability closure for standard rewriting 
and show how to extend it for dealing with rewriting modulo so me equationa l theory and higher-order 
pattern-matching, by providing detailed proofs of results sketched in BlaOSj, |Bla07 1. We do it in a progressive 
way by showing, step by step, how the notion of computability closure can be extended to cope with new 
term constructions or new rewriting mechanisms. To avoid unnecessary technicalities related to the type 
discipline, we do it in the simply typed A-calculus b ut this work could be conducted in the Calculus of 
Algebraic Constructions as well, following the lines of [BlaObll . 

The paper is organized as follows. In Section [2l we define the set of terms that will be considered, 
introduce our notations and recall some general results on well-founded relations. In Section |31 we present 
the different definitions of computability introduced so far and discuss their relations and applicability to 
rewriting. In Section 01 we show how Girard’s definition of computability can be extended to deal with 
rewriting with matching modulo a-equivalence by introducing the notion of computability closure, and 
provide a first core definition of such a computability closure. Then follows a number of subsections and 
sections showing how to extend this core definition to deal with new constructions or more general notions 
of rewriting: abstraction and bound variables, basic subterms, recursive functions, higher-order subterms, 
matching on defined symbols, rewriting modulo an equational theory and rewriting with matching modulo 
Prj. We finally explain why our results apply to HRSs and simply typed CRSs as well. 

Parts of this work have already been formalized in the Coq proof assistant Blal.lj . See the conclusion 
for more details about that. 


2. Definitions and notations 


We first recall some de finitions and notation s about simply-typed A-terms, rewriting and well-founded 
relations. See for instance DJ9Cll . Bar92 . TeR03 1 for more details. 


2.1. Notations for sequences 

Given a set A, let A* be the free monoid generated from A, i.e. the set of finite sequences of elements 
of A or words on A. We denote the empty word by e, word concatenation by juxtaposition, and the length 
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of a word w by We often denote a word oi... a„ by a. A word p is a prefix of a word q, written p < q, 
if there is r such that q = pr. The prefix relation is a partial ordering. We write pffq if p and q are not 
comparable or disjoint. 


2.2. Simple types 

We assume given a set B of type constants. As usual, the set T of (simple) types is defined recursively as 
follows ChudOj l : 


• a type constant B G B is a. type; 

• if T and U are types, then T => C7 is a type. 


2.3. Terms 

All over the paper, we only con sider si mply typed A-terms (terms are always well-typed). 

We follow Pottinger’s approach PotTSj, that is, we assume that every variable or function symbol comes 
equipped with a fixed (simple) type and that a-equivalence replaces a variable by another variable of the 
same type only (assuming an infinite set of variable for each type). Hence, we do not have to consider 
untyped terms and introduce typing environments (finite map from variables to types) for terms and rules: 
it is like working in a fixed infinite typing environment. 

Let X be an infinite set of variables and -F be a set of function symbols disjoint from A, and assume 
that each variable or function symbol s is equipped with a type t ( s ) so that there is an infinite number of 
variable of each type. 

The family of th® sets of raw terms of type T is inductively defined as follows: 


• if s G A U then s € 

• if X € X, T G T and t G then Xxt G 


• iiU,V gT, t G and u G , then tu G . 


For every type T, the set of term s of typ e T is the quotient of by type-preserving a-equivalence, that 
is, Xxt =a Xyu only if t{x) = T{y) jPot78l |. Let C = UreT'^^ (typed) terms. We write 

t : T or r(t) = T if the a-equivalence class of t belongs to . A relation R on terms preserves types if 
T(t) = t{u) whenever {t,u) G R, written tRu {e.g. a-equivalence). 

Note that function symbols do not have to be applied to any argument nor any fixed number of arguments. 
Hence, f, fx, fxy, etc. are legal terms (as long as they are well-typed). However, in some examples, for 
convenience, we may use infix notations, like x + y for denoting +xy. 

Let FV(t) be the set of variables having a free occurrence in t {i.e. not bound by a A), and BV(t) be the 
set of binding variables of a raw term t {e.g. fXV{Xxy) = {x}). 

A term is linear if no variable has more than one free occurrence in it. 

A term is algebraic if it contains no subterm of the form Xxt or xt. 

A type-preserving relation R on terms is monotone if, for all t, u, v, x such that tRu, one has {Xxt)R{Xxu), 
{tv)R{uv) whenever tv is well-typed, and {vt)R{vu) whenever vt is well-typed. 


2 . 4 . Substitution 

A substitution cr is a map from X to C such that (1) for all x G X, T{a{x)) = t ( x ), and (2) its domain 
dom(cr) = {x G X \ a{x) 7 ^ x} is finite. In particular, we write “ for the substitution a such that a{x) = u 
and <7{y) = y if y ^ x. Let FV(cr) = lJ{FV(cr(x)) | x G dom(cr)}. A substitution a is away from A C A if 
(dom(cr) U FV(cr)) fl A = 0. 

Given a term t and a substitution cr, we denote by ta the term obtained by replacing in t each free 
occurrence of a varia ble x by cr(x) by renaming, if necessary, variables bound in t so that no variable free in 
a{x) becomes bound CFSsf . Note that substitution preserves typing: T{ta) = T{t). 

A relation R is stable by substitution (away from A) if {ta)R{ua) whenever tRu (and a is away from A). 
It is a congruence if it is an equivalence relation that is monotone and stable by substitution. 
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2.5. Stable subterm ordering 

The notion of sub-raw-term is not compatible with a-equivalence. Instead, we consider the notion of 
stable subterm: < <s m if f is a sub-raw-term of u and FV(<) C FV(u). The relation is a partial ordering 
stable by substitution. Let Os be its strict part and >s (resp. Os) be the inverse of <s (resp. Os). 


2.6. Positions 

The set of positions in a (raw) term t, Pos(t), is the subset of {0,1}* such that: 


• Pos(a;) = Pos(f) = {e} ii x € X and f € 

• Pos(tu) = {e} U {Ore | w G Pos(t)} U {lie | w G Pos(u)} 


• Pos(Aa;<) = {e} U {Ore | w G Pos(t)} 

Given a (raw) term t, we denote by t\p its sub-raw-term at position p G Pos(t), and by t[u\p the (raw) 
term obtained by replacing it by u. 

A term t is rj-long if every variable or function symbol occurring in it is maximally applied, that is, for 
all p G P os(t), if G A U and t\p : T ^ A, then there are q G Pos(t) and t such that p = and 
t\q = t\pt Hue76l |. 

Given a term t and p G Pos(t), the set BY{t,p) of binding variables above t\p is defined as follows: 

• BV(t, e) = 0 

• BY{tu, Op) = BY(t,p) 

• BV(tM, Ip) = BY{u,p) 

• BV(Aa:t, Op) = {x} U BV(t,p) 

For instance, Pos(Aa;fa:) = {e, 0,00,01} and BV(Aa:fx, 0) = {x}. 


2. 7. Rewriting 

The relation of/3-redMctzon (resp. rj-reduction), (resp. 


,), is the monotone closure of {{{Xxt)u, t^ 


G X} (resp. {{Xx{tx),t) \ t € C,x G 


X,x ^ FV(t)}). We write t u to indicate that 


T-q 


u. Note that the relation -^pq = -^p U preserves 


G C,x 

t\p = {Xxa)b and u = and similarly for t 

typing: if < : T and t -^pq t', then t' : T. 

An equation is a pair of terms {l,r), written I = r, such that t{1) = T(r). A (rewrite) rule is a pair of 
terms (1, r), written I —>■ r, such that t{1) = T{r), I is of the form U and FV(r) C FV(1). 

We assume neither that, if fZ —>■ r is a rule, then every occurrence of f in r comes applied to |Z| arguments, 
nor that, if fZ —>■ r and fm s are two distinct rules, then |Z| = |m|. And, indeed, we will give examples 
of systems that do not satisfy these constraints in Section 14.61 (function ex) and Section [ 6 ] (after Lemma 
[201). Such systems are ne cessary for dealing with matching modulo fdrj because we use curried symbols. In 
contrast, in HRSs NipQlj . function symbols are always maximally applied (wrt their types) since terms are 
in p-long form and rules are of the form fZ —>■ r with fZ of base type. Note however that, in |vdP96l| . van de 
Pol considers rules not necessarily in p-long form nor of base type. 

The rewriting relation generated by a set of rules TZ, written —> 7 ?,, is the closure by monotony and 
substitution of TZ. Hence, t u if there are p G Pos(t), Z —>■ r G 72. and a such that t\p = la and u = t[ra]p. 
For instance, with 72 = {fx x}, we have Axfxp Xxxy. Note that rewriting preserves typing: if t : T 
and t -g-tz t', then t' :T. 

Given a set of rules 72, let 77(72) = {f G | 3Z,3r, fZ r G 72} be the subset of symbols defined by 
72, and Of = sup{|Z| | 3r, fZ —>■ r G 72}. Note that Of is finite even if 72 is infinite for fZ is simply typed by 
assumption!^ 


^However, with polymorphic types, or dependent types together with type-level rewriting {e.g. strong elimination), af may 
be infinite if 'R. is infinite. 
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2 .8. Notations for relations 

Given a relation i? on a set A, let It(t) = {u G A \ tRu} be the set of reducts or successors of t. An 
element t such that R{t) = 0 is said to be in normal form or irreducible. 

Given a relation R, let be the reflexive closure of R, R'^ its transitive closure, R* its reflexive and 
transitive closure, and R~^ its inverse (xR~^y iff yRx). 

However, we will denote by ■<—; 3 , and •«— 7 ^ the inverse relations of -Gp, —and -Gn respectively; by 
GGp, GGrj and GGprj the symmetric closures of -Gp, —and -^p-q respectively (he. -^p U •(—etc.); and by 
=q and =pq the reflexive and transitive closures of GGq and <G>-pq respectively. 

Given two relations R and S, we denote their composition by juxtaposition and say that R commutes 
with S if RS C SR. For instance, if R is monotone, then Os commutes with R. 

A relation R is strongly confluent if R~^R C locally confluent if R~^R C R*{R~^)*, and 

conflue nt if {R~^)*R* C R*[R~^)*. For instance, the relations -Gq, -Gp and their union -^pq are all confluent 
Pnt78l| . 


2.9. Notations for quasi-orderings 

Given an equivalence relation R on a set A, we denote by [tJ/j the equivalence class of an element t, and 
by A/R the set of equivalence classes modulo R. 

Given a quasi-ordering > on a set A (transitive and reflexive relation), let ~ = > H be its associated 
equivalence relation and > = > — >“^ be its strict part (transitive and irreflexive relation). 


2.10. Well-founded relations 

Given a set A, an element a G A is strongly normalizing wrt a relation i? on A if there is no infinite 
sequence a = a^RaiR... The relation R terminates (or is noetherian or well-founded on A if every element 
of A is strongly normalizing wrt R. Let SN(i?) be the set of elements of A that are strongly normalizing 
wrt R. By abuse of language, we sometimes say that a quasi-ordering > is well-founded when its strict part 
so is. 

If R terminates (resp. is confluent) then every element has at least (resp. at most) one normal form. In 
particular, we will denote by tfq the unique normal form of t wrt -Gq. 

Note that, if R is monotone, then i? U >5 terminates iff R terminates. 

In this paper, we are interested in the termin ation of the relation -P-p U -g-ti, or variants thereof. Note 
that -Gp terminates on well-typ ed term s [San67l |. However, since termination is not a modular property 
(already in the first-order case) [Tov87 |. the termination of -G-ji is generally not sufficient to guarantee the 
termination of U -G-ji. Moreover, considering -G-ji alone does not make sense when, in a right-hand side 
of a rule, a free variable is applied to a term. This is not the case in CRSs and HRSs sin ce, in these systems, 
the definition of rewriting includes some /3-reductions after a rule application vOvR9,3j |. 


2.11. Product quasi-ordering 

The product of n relations i?i,..., i?„ on the sets Ai,..., A„ respectively is the relation (i?i,..., i?„)prod 
on Ai X ... X An such that x (i?i,..., i?n)prod y if, for all i € [1, n], XiRiyi. 

If each Ri is a quasi-ordering, then (i?i,..., i?„)prod is a quasi-ordering too. If, moreover, the strict parts 
of i?i,..., Rn are well-founded, then the strict part of (i?i,..., i?n)prod is well-founded too. 

Given a quasi-ordering > on a set A, let also >prod denote the product quasi-ordering on A" with each 
component ordered by >. 


2.12. Multiset quasi-ordering 

Given a set A , let Ai — M(A) be the set of finite multisets on A (functions from A to N with finite 
support) |DM79I |. Given a quasi-ordering >a on A, the extension of >a on finite m ultiset s is the smallest 
quasi-ordering >^4 containing U where and >\^ are defined as follows [CJ^: 

• 0 ~M 0, and M -\- {|x|} ~ 7 V( N -G {| 2 /|} if M N and x J/H 

contrast with the mathematical tradition where a relation R is said well-founded if there is no infinite descending chain 
aQR~^aiR~^ . .. 

^Here, A-\- B is the multiset union of the multisets A and S, and {\yi,... ,yn\i the multiset made of ,..., 
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• M + {|a;[l- M + {|yi,..., y„|} (n > 0) if, for every i e [0, n], a; >a Vi] 

where (resp. >^) is the equivalence relation associated to (resp. strict part of) >yi. 

Its associated equivalence relation is ~m- Us strict part >m is (>^)^ -M- H is well-founded if is 
well-founded. 

Finally, let >mui be the quasi-ordering on A* such that x >mui y if {|^|} {|2/|}- 

2.13. Lexicographic quasi-ordering 

Given quasi-orderings >i,..., >n on sets Ai,..., the lexicographic quasi-ordering on x ... x A„, 

written (>i,..., >n)iex, is the union of the following two relations: 

• ( — 1; ■ • ■ I —r!,)prod; 

• X > y if there is * S [1, n] such that Xi >i yt and, for all j < i, xj yj; 

where (resp. >i) is the equivalence relation associated to (resp. strict part of) >i. If >i,...,>„ are 
well-founded, then > is well-founded too. 

Given a quasi-ordering > on a set A, let >iex also denote the lexicographic quasi-ordering on with 
each component ordered by >. 

2.14. Dependent lexicographic quasi-ordering 

Given two sets A and B and, for each x € A, a set C _B, the dependent product of A and {Bx)x^a 
is the set Ti^^aBx of pairs (x, j/) & Ax B such that y & Bx. In the following, we use in many places 
a generalization to dependent products of the lexico graphic quasi-ordering (generalizing to quasi-orderings 
Paulson’s lexicographic ordering on dependent pairs |Pau86l |l: 

Definition 1 (Dependent lexicographic quasi-ordering). The dependent lexicographic quasi-ordering 
(DLQO) on a dependent product Hx&aBx associated to: 

• a quasi-ordering >a on A; 

• for each equivalence class E modulo a set Ce equipped with a quasi-ordering >e; 

• for each x G A, a partial function ipx ■ Bx —>■ Cix]~^ j 
is the union of the following two relations: 

• {x,y) ~ {x',y') if x x' A V’x(y) i’x'i.y'); 

• {x,y) > {x',y') if x >ax'V (x x' Aipx{y) >[x]~^ i’x'iv')); 

where (resp. cs^) is the equivalence relation associated to >a (resp. >e), and >a (resp. >e) the strict 
part of >A (resp. >e)- 

If >yi and each >e are well-founded, then > is well-founded too. Various examples of DLQOs will be 
given and used in the paper (in particular, in Sections 14.5.11 and 15 .1 II . 
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3. Computability 


The computability method was introduced by Tait to prove the weak normalizatio n of ( i. e . the existence 


of a normal form wrt) /3-reduction in some extensions of the sim ply typed A-calculus Tai67|, and was late r 


extended by Girard for dealing with polymorphic types GirTlj and strong normalization 
This method consists of: 


Gir72l. IGLT 88 |. 


1. defining a domain Cand C 7^(SN(—>-^)) of computability candidates for interpreting typesH 

2. interpreting each type T by a candidate [T] € Cand; 

3. proving that each term of type T is computable, i.e. belongs to |T], from which it follows that every 
typed term is strongly normalizing wrt 


In this section, we will see the various definitions that have been proposed for Cand so far, and discuss 
which ones are best suited for extension to arbitrary, and in particular non-orthogonal 3 , rewrite systems. 
However, all those definitions satisfy the following properties: 


• variables are computable: for every P G Cand, X Q P] 

• Cand is stable by the operation oc: P{C) x P{C) ViC) defined by: 

oc (P, Q) = {u e £ I Vt e P, vt G Q} 
i.e. if P, Q G Cand, then oc(P, Q) G Cand; 

• Cand is stable by arbitrarj@ non-empty intersection: 

if is a non-empty family of candidates, then Hie/ ^ Cand; 

• Cand contains SN(— 

The last two conditions imply that Cand has a structure of complete lattice for inclusionl^ the greatest 
lower bound of a set P C Cand being given by the intersection P|P if P 7 ^ 0, and SN(—>-^) if P = 0. 
However , its lowest upper bound (the smallest candidate containing the union) is not necessarily the union 
Rihn7a| . 

The intersection allows one to interpret quantification on types (polymorphism) or inductive types (see 
Sectionwhile oc allows one to interpret ^ so that, by definition, vt G [H] if u G [P => P] and t G [P], 
which is the main problem when trying to prove the termination of ,5-reduction. 


We now see every definition we are aware of: 


• Red: Girard’ set of reducibility candidates [Gir72l . lGLT 88 l| . A set P belongs to Red if the following 
conditions are satisfied: 


(Ri) P c SN(^; 3 ); 

(R2) P is stable by reduction: if t G P and t u, then u G P; 
(R3) if t is a neutro^^ term and -^p (t) C P, then t G P. 


®In the following, like Girard in iGir 7 I IGLT 88 II . we will in fact consider a domain Cand^ C for each type T, but 

this is not relevant in this section. 

rewrite system is orthogonal if it is left-linear and non-ambiguous {i.e. has no critic al pair) . This is in p articular the 
case of ML-like programs. An important property of orthogonal systems is their confluence [HueSOl IkIo 8Q|. IvQ94H . 

^Finite or infinite. 

^An inf-complete lattice L that has a biggest element is complete. The supremum of a set P C L is indeed glb(ub(P)) 
where gib is the greates t lowe r bound and ub(P ) is the non-empty set of all the upper bounds of P. 

10 Called “simple” in lGir72H and “neutral” in IGLT88H . 





























In A-calculus with no function symbols, a term is neutral if it is not an abstraction. Neutral terms satisfy 
the following key property: if t is neutral then, for all terms u, (tu) = {t'u \ t t'}yj{tu' \ u u'}, 
that is, the application of t cannot create new redexes. 


Sat: Tait’ set of saturate^^ sets Tai75l| . A set P belongs to Sat if the following conditions are satisfied: 


(51) P C SN(^; 3 ); 

(52) P contains all the strongly normalizable terms of the form xt; 

(53) if S P and u G SN(^^), then {\xt)uv G P. 


Satind: Parigot’ smallest subset of Sat containing SN(^^) and stable by oc and P| |Par97 |. As Parigot 
remarked, for /3-reduction, it is not necessary to consider all saturated sets but only those that can be 
obtained from SN(—>-,g) by oc and intersection. 


Bi: Parigot ’ set of bi- orthogonal^ [Par93LlPar97j is the set {oc* [E, SN(^^)) | 0 7 ^ A C SN(— 7 / 3 )*} where 
SN(— 7 / 3 )* is the set of finite sequences of elements of SN(— 7 / 3 ) and oc*: V{C*) x V{C) —7 V{C) extends oc 
as follows: 

oc* (A, Q) = {v G C \ 'it G E ,vt G Q} 


Note that a sequence t G C* can be seen as the context []t. Hence, 


oc* (A, Q) = {u G £ I Ve e A, G Q}. 


Reducibility candidates and saturated sets are studied in Gal9Cll| . In particular, every reducibility can¬ 
didate is a saturated set: Red C Sat. The converse does not hold in general since a saturated set does 
not need to be stable by reduction: for instance, the smallest saturated set containing Xx{Xyy)x does not 
contain Axcc. However, Riba showed that every saturated set st able by reduction is a reducibility candidate 


Rib07al| . Hence, Red = Sat^ = {P G Sat | — 7/3 (P) C P}. In [Par97j . Parigot showed that every element 


of Satind is a bi-o rthogonal: Satind C Bi. Finally, Riba showed that every bi-orthogonal is a reducibility 
candidate Rib07bj| : Bi C Red. In particular, bi-orthogonals are stable by reduction. On the other hand, 
I don’t know whether Satind, Bi and Red are distinct. In conclusion, we currently have the following 
relations: 

Satind C Bi C Red = Sat^ C Sat 


A natural question is then to know to which extent each one of these sets can be used to handle rewriting, 
and if a set allows to show the termination of more systems than the others. All these definitions rely on 
the form of redexes (reducible expressions): Red uses the notion of neutral term, a set P G Sat has to be 
stable by head-expansion (inverse relation of head-reduction), and Bi is defined as the set of bi-orthogonals 
wrt a relation between terms and contexts that allows one to build redexes. 


• Bi being exclusively based on the notion of context, it does not seem possible to extend it to non- 
orthogonal rewrite relations. 

• The saturated sets could perhaps be extended by adding: 

(S4) if 1 —7 r G P, rat G P and a G SN(—7/3 U —77j), then lat G P. 

In order to have SN(— 7,3 U —7-r.) G Sat 7 ^, one has then to prove that lat G SN(— 7 ^ U — 77 ^) if rat G SN(— 7 ^ 
U —77j) and a G SN(— 7 ^ U —77j), which is generally not the case if 7Z is not orthogonal. This problem 
could perhaps be solved by considering all the head-reducts of la, but then we would arrive at a condition 
similar to (R3). 


^^This expression seems due to Gallier iGa a. _ _ 

Parigot did not use the expression “bi-orthogonal”. To my knowledge, this expression first appears in [VMQ4|| . See [Abe06(| . 
p. 67, for a discussion about the origin of this expression. Anyway, Parigot computability predicates are indeed bi-orthogonals 
wrt the orthogonality relation J_ between P(SN(—>-^)) and 7^(SN(—>-^)*) such that PJ-E if Vu £ P,'^t £ E,vt £ SN(—>-^ 3 ). 
The (right) orthogonal of P C SN(—)-^) is P-*- = {t £ SN (—\ 'iv £ P,vt £ SN(—>-^)}, while the (left) orthogonal of 
E C SN(^^)* is ^E = oc* (P,SN(^^)). One can then see that Bi = {P C SN(^^) | P / 0 A ^(P^) = P}. 
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• In contrast to the previous domains, Girard’s reducibility candidates seem easy to extend to arbitrary 
rewrite relations. This is therefore the notion of computability that we will use in the following. 


4. Rewriting with matching modulo a-equivalence 


In this section, we provide a survey on the notion of computability closure for standard rewriting (that 
is i n fact rewriting modulo a-equivalence, because terms are defined modulo a-equivalence) first introduced 
in BJO 99 I BJOO 2 II . We present the computability closure progressively by showing at each step how it has 


i eacn step now it 

to be extended to handle new term constructions. Omitted proofs can be found in [BJO021 iBlaOSj . For 
dealing with recursive function definitions (Section 03] below), we introduce a new more general rule based 
on the notion of J^-quasi-ordering compatible with application (Definition Ej) and provide various examples 
of such J^-quasi-orderings in Section l4. 5.1 1 land later in Section [Oil . 


J^.l. Definition of computability 

To extend to rewriting Girard’s definition of computability predicates GLT88l | . we first have to define 
the set of neutral terms. By analogy with abstractions, a term of the form H with f G D{TZ) should be 
neutral only if f is applied to enough arguments wrt TZ, i.e. |tl > af. Otherwise, ftu could be head-reducible 
and the key property of neutral terms, that —>■ (tu) = {t'u | t —>• t'} U {tu' \ u —>• rt'} whenever t is neutral, 
would not hold. Now, what about terms of the form ft with f G — V{TZ) (undefined symbols)? We could 
a priori consider them as neutral. However, for dealing with higher-order subterms in Sections 14.61 and 14.71 
we will consider type interpretations for which it seems difficult to prove (R3) if such terms are neutral. We 
therefore exclude them from neutral terms: 


Definition 2 (Computability candidates). Given a set TZ of rewrite rules of the form H —>■ r, a term is 
neutra^^ if it is of the form xv, {Xxt)uv or fv with f G D{TZ) and |17| > af = | 3r, fZ —)• r S TZ}. 

Given a type T, let Red^ be the set of all the sets P C such that: 

(Rl) P C SN(—>•) where —>■ = U 

(R2) P is stable by reduction: if t G P and t ^ u, then u G P] 

(R3) if t : T is neutral and — [t) C P, then t G P. 

Given P G Red^ and Q G Red^, let (x{P,Q) = {v : T ^ U \ \/t G P,vt G Q}. 


Note that computability predicates are sets of well-typed terms and that all the elements of a com¬ 
putability predicate have the same type. 

For the sake of simplicity, in all the remaining of the paper, we write SN instead of SN(—)•), but —> will 
have different meanings in sections and [6| 

We now check that the family (Red^) 7 ’g 7 - has the properties described in Section [3] 

Lemma 1 For every type T, Red^ is stable by non-empty intersection and admits SN^ = {t : T \ t G SN} 
as greatest element. Moreover, for all T,U gT, P G Red^ and Q G Red^, oc(P, Q) G Red^"^^. 

Proof. The fact that SN^ G RedTj and the stability by non-empty intersection are easily proved. We only 
detail the stability by oc. Let T,U G T, P G Red^ and Q G Red)^. Every element of oc (P, Q) is of type 
T^U. 

(Rl) Let V G oc{P, Q). Let a: be a variable of type T. By (R3), x G P. By definition of oc, vx G Q. By (RI), 
vx G SN. Thus, V G SN. 

(R2) Let w G oc (P, Q), w' G —>■ (v) and t G P. By definition of oc, vt G Q. By (R2), v't G Q. 


will give a more general definition in Definition [T^ 
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(R3) Let V : T ^ U neutral such that —>'(u) C (x{P,Q), and t € P. We show that vt € Q hy well-founded 
induction on t with —)• as well-founded relation (t € SN by (Rl))- Since v is neutral, vt is neutral too. 
Hence, by (R3), it is sufficient to show that —)• {vt) C Q. Let w G -^{vt). We first prove (a): either 
w = v't with V ^ v', OT w = vt' with t —>■ t'. We proceed by case on vt —>■ w: 

• vt w. Since v is neutraf, v is not an abstraction and (a) is satisfied. 

• vt w. If there are til ^ r G TZ and a such that vt = tlala and w = rcr, then v = tla and 

\l\ < \ll\ < af. Since v is neutraf, this is not possibfe. Thus (a) is verified. 

We now show that w G Q. 

• Case w = v't with v v'. By assumption, v' G oc(P, Q). As t G P, we have w G Q. 

• Case w = vt' with t —>• t'. By (R2), t' G P. Thus, by the induction hypothesis, w G Q. ■ 

Therefore, as already mentioned in Section [31 every Red^ is a complete lattice for inclusion. 

Now, one can easily check Tait’s property (S3) described in the previous section (implying that elements 
of Red^ are Tait saturated sets with SN(^^) replaced by SN(^^ U —tyi))- 

Lemma 2 Given T gT and P G Red^, {\xt)uv G P iff {Xxt)uv : T, G P and u G SN. 

Proof. Assume that {Xxt)uv G P. Then, {Xxt)uv : T. By (R2), G P. By (Rl), {Xxt)uv G SN. 

Therefore, u G SN. 

Assume now that {Xxt)uv : T, t^v G P and u G SN. By (Rl), G SN. Therefore, v G SN, G SN and 
t G SN. We now prove that, for all t,u,v G SN, (Xxt)uv G P, by induction on ^prod- Since {Xxf)uv : T and 
{Xxf)uv is neutral, by (R3), it suffices to prove that every reduct w of {Xxt)uv belongs to P. Since rules are 
of the form fl r, there are two possible cases: 

• w = t“?T. Then, w G P hy assumption. 

• w = {Xxt')u'v' and tuv —^-prod t'u'v'. Then, w G P hy the induction hypothesis. ■ 

Corollary 1 Given T,U G T, P G Red^ and Q G Red)^, Xxt G oc (Q,P) iff Xxt : U ^ T and, for all 
u G Q, tf{ G P. 

Proof. Assume that Xxt G (x{Q,P) and u G Q. Then, by definition of cx, Xxt : U ^ T and {Xxt)u G P. 
Therefore, by (R2), G P. Assume now that Xxt : U ^ T and, for all u G P, tlf. G P. By definition, 
Xxt G (x{Q,P) if, for all u G Q, {Xxt)u G P. So, let u G Q. By (Rl), u G SN. Therefore, by Lemma [H 
{Xxt)u G P. ■ 

Given two sets A and B and, for each a; G A, a set C B, let Bx^aBx = P{^xeABx) be the set of 
partial functions f : A ^ B such that, for all x G dom(f), f{x) G Bx- 

Given an interpretation of type constants I G HBegRed^, the interpretation of types |_]^ G HTerR^d^ 
is defined as follows: 

• |Bf = /(B) ABgB, 

• = (x([T]M//f). 

We say that a type constant B is basic if its interpretation is SN^, and that a symbol f : T B is basic 
if B is basic. Let the basic interpretation be the interpretation / such that /(B) = SN® for all B G B. 

We say that a term t : T is computable wrt a base type interpretation / if t G |T]^. A substitution cr is 
computable wrt a base type interpretation I if, for all x G X, xa G |r(a;)]'^. Note that, by (R3), variables 
are computable. Therefore, the identity substitution is always computable. 

By definition of the interpretation of arrow types, a symbol f : T => // is computable wrt a base type 
interpretation I if, for all t G ITI^, ft*G {UY. So, let be the set of pairs (f, t) such that t : T ^ U and 
t G |T]^ (f may be partially applied in ft), and let be the subset of E^ made of the pairs (f,t) such 
that U G B, that is, when f is maximally applied. 

In the following, we may drop the exponent I when it is clear from the context. 
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Theorem 1 The relation — U terminates on well-typed terms if there is I G HBeeRed^ such that 
every non-basic undefined symbol and every defined symbol is computable. 

Proof. It suffices to prove that every well-typed term is computable. For dealing with abstraction, we 
prove the more general statement that, for all t : T and computable a, ta G |T], by induction on t. This 
indeed implies that every well-typed term is computable since the identity substitution is computable by 
(R3). We proceed by case on t: 

• t = X € X. Then, ta = xa € [T] since a is computable. 

• t = uv. By the induction hypothesis, ua S |F(r') T] and va G [T(n)]. Therefore, by definition of |_], 
ta = {ua){va) G [T]. 

• t = f : T => A. If f is a defined symbol or a non-basic undefined symbol, then ta = f is computable by 
assumption. Otherwise, f is a basic undefined symbol. By definition, it is computable if, for all t G [T], 
ft G |AJ. Since f is basic, [A] = SN. Now, one can easily prove that ft G SN, by induction on t with 
—^-prod as well-founded relation (t G SN by (Rl)). 

• t = Xxu. Wlog we can assume that a is away from {a:}. Hence, ta = \x(ua). By Corollary[Tl Ax(ua) G 

|T] = |T(a;) => r(w)] if Xx{ua) : t{x) t{U) and (ua)'^ G |f(u)] for all v G |F(a;)]. Since a is away 
from {a:}, we have (ua)'^ = u6 where x9 = v and y9 = ya if y ^ x. Since 9 is computable, by induction 
hypothesis, u9 G |'r(M)]. ■ 

Note that, with the basic interpretation, there is no non-basic undefined symbol. In Section [4.41 we will 
see another interpretation with which non-basic undefined symbols are computable. 

4-.2. Core computability closure 

The next step consists then in proving that every defined symbol is computable, i.e. f G |'r(f)]^ for all 
f G V{TZ). Assume that r(f) = T A. As just seen above, f is computable if, for all t G |T]^, ft G /(A). 
Since f G 'D{TVj and |t| > at, ft is neutral and, by (R3), belongs to /(A) if all its reducts so do. The notion 
of computability closure enforces this property. 

Definition 3 (Computability closure). A computability closure is a function CC mapping every f G 
'D{TZ) and I G C* such that fl is well-typed to a set of well-typed terms. 

Definition 4 (Valid computability closure — first definition). □ A computability closure CC is valid 
wrt a base type interpretation I if it satisfies the following properties: 

• it is stable by substitution: ta G CCf{la) whenever t G CCf(Z); 

• it preserves computability wrt I: every element of CCf(Z) is computable whenever I so are. 

Theorem 2 Given I G HseBR-Gd^, every defined symbol is computable if there is a valid computability 
closure CC such that, for every rule fl ^ r G TZ, we have r G CCf(/). 

Proof. As just explained, it is sufficient to prove that, for all (f,t) G S^ax with f G T){TZ) and f : T ^ A, 
every reduct t of ft belongs to |A] . We proceed by well-founded induction on t with —^-prod as well-founded 
relation {t G SN by (Rl)). There are two possible cases: 

• There is u such that t = fu and t —^-prod u- By (R2), u G [T]. Therefore, by the induction hypothesis, 
fu G |A]. 


give a more general definition in Definition [5] 
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• There are w, fl ^ r € TZ and cr such that t = law and t = raw. Since r € CCf{l) and CC is stable by 
substitution, we have ra € CCf (la). Since la are computable and CC preserves computability, we have 
ra computable. Finally, since w is computable, we have t computable. ■ 

Hence, the termination of —U —can be reduced to finding computability-preserving operations to 
define a computability closure. Among such operations, one can consider the ones of Figure [T] that directly 
follow from the definition or properties of computability. 


Figure 1: Computability closure operations I 


(arg) 

(app) 

(red) 

(undef-basic) 


{1} C CCf(l) 

if t e CCf(l), t :U ^V,u€ CCf(l) and u : U, then tu S CCf(/) 
if t G CCf{l) and t ^ u, then u G CCf(/) 

if g G J" - V{n), g : f B, B G S and [B] = SN®, then g G CCf(r) 


Theorem 3 For all I G HBesR-Gd^, the smallest computability closure closed by the operations I is valid. 

Proof. • Stability by substitution. We prove that, for all t G CCf(^), we have ta G CCf(/CT), by induction 
on the definition of CCf(/). 

(arg) By (arg), {la} C GGf(la). 

(app) By the induction hypothesis, {ta,ua} C CCf (/cr). Therefore, by (app), {tu)a = {ta){ua) G 
CCf(/CT). 

(red) By the induction hypothesis, ta G CCf (/cr). Since ^ is stable by substitution, ta ua. Therefore, 
by (red), ua G CCf(/cr). 

(undef-basic) By (undef-basic), gcr = g G CCf(/cr). 

• Preservation of computability. Assume that / are computable. We prove that, for all t G CCf(/), t is 
computable, by induction on the definition of CCf(/). 

(arg) / are computable by assumption. 

(app) By the induction hypothesis, t and u are computable. Therefore, by definition of \U H], tu is 
computable. 

(red) By the induction hypothesis, t is computable. Therefore, by (R2), u is computable, 
(undef-basic) After the proof of Theorem [H g is computable. ■ 

Therefore, using for / the basic interpretation, we get: 

Corollary 2 The relation U terminates on well-typed terms if, for every rule f/ —>■ r G 7^, we have 
r G CCf(/), where CC is the smallest computability closure closed by the operations I. 

4 . 3 . Handling abstractions and bound variables 

Consider now the following symbol definition, where T, U and V are any type: 

o: (U ^V) ^ (T =^U) (T ^V) 
fog -)> Xx f (g x) 
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It cannot be handled by the operations I. By Corollary [U a term \xt is computable if, for all u € |T(a;)], 
is computable. We can therefore extend the previous core definition of CC by the rules of Figure [5] if we 
generalize validity as follows: 

Definition 5 (Valid computability closure — extended definition). A computability closure CC 
is valid wrt a base type interpretation I if: 

• it is stable by substitution: ta G CCf{lcr) whenever t G CCf(Z) and a is away from FV(t) — FV(?); 

• it preserves computability wrt I: tO is computable whenever t G CCf(/), I are computable, 9 is computable 
and dom(6») C FY(t) - FY{1). 

Note that, if FV(t) C FV(Z) as it is required for the right-hand side of a rule, then the above conditions 
reduce to the ones of Definition 01 


Figure 2: Computability closure operations II 


(var) A - FV(r) C CCf(r) 

(abs) if t G CCf{l) and x € X — FV(I), then Xxt G CCf(/) 


Theorem 4 For all I G flBegRed^, the smallest computability closure CC closed by the operations I and 

II is valid. 

Proof. We proceed as in Theorem [3] but only detail the new cases. 

• Stability by substitution. We prove that, for all t G CCf(^) and a away from FV(t) — FV(?), we have 

ta G CCf{la), by induction on the definition of CCf(^). 

(var) Let x € X — FY{1). Since a is away from FV(a;) — FV(?), we have xa = x and x £ X — FY{la). 
Therefore, by (var), x G CCf(Zcr). 

(abs) Wlog we can assume that a is away from {a:}. Hence, {Xxt)a = Xx{ta) and, since x G X — FY{1), 
we have x G X — FY{la). Therefore, by (abs), Xx{ta) G CCf{la) for, by the induction hypothesis, 
ta G CCf{la). 

• Preservation of computability. Assume that I are computable. We prove that, for all t G CCf(l) and 

computable 9 such that dom(0) C FV(t) — FY(l), we have t9 computable, by induction on CCf(l). 

(var) Let x G X — FY(l). Then, x9 is computable by assumption. 

(abs) Wlog we can assume that 9 is away from {x}. Hence, (Xxt)9 = Xx{t9). Now, by Corollary [H 
Xx{t9) is computable if, for all computable u : t{x), {19)"^ is computable. Since 9 is away from {x}, 
(td)“ = ta where xa = u and y9 = ya ii y ^ x. Now, a is computable and dom(tT) C FV(t) — FV(/) for 
dom(0) C FY{Xxt) — FY{1). Therefore, by the induction hypothesis, ta is computable. ■ 

For instance, we have {f,g} Q CCo by (arg), x G CCo by (var), f{gx) G CCo{f,g) by (app) twice, and 

Xxf{gx) G CCoif,g) by (abs). 


^®This definition replaces the one given in Definition |4l 
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4 - 4 - Handling basic subterms 

Consider now the following definition on unary natural numbers (Peano integers): 


z : N; s : N ^ N 

pred z ^ z 
pred (s a;) ^ x 

In order to handle this definition, we need to extend the computability closure with some subterm 
operation. Unfortunately, l>s does not always preserve computability as shown by the following example^ 


f:A^(A=^B); c : (A ^ B) ^ A 

f (c 2/) y 


Indeed, with w = Xxfxx, we have w{cw) f{cw){cw) w{cw) ... [Men87|. Therefore, cw 
but w ^ oc(SN, SN) since w{cw) ^ SN. 

On the other hand, l>s preserves termination. Hence, we can add the operation of Figure [3] for 
subterms (we omit the proof). 


e SN 
basic 


Figure 3: Computability closure operations III 


(subterm-basic) if t G CCf(Z), t >s u : B G fi and |B] = SN^, then u G CCf(2) 


Hence, to handle the above predecessor function definition, it is enough to take /(N) = SN'^. 

In Sections 14.61 and l6l we will see other computability-preserving subterm operations. 

4-5. Handling recursive functions 

Consider now a simple recursive function definition: 

+ : N ^ N ^ N 

z + y ^ y 

{sx)+y s{x + y) 

For handling such a recursive definition, and more generally mutually recursively defined functions, we 
need to extend CCf(l) with terms of the form gm. In order to ensure termination, we can try to use some 
well-founded DLQO > on E (DLQOs are defined in Definition [T] and E just before Theorem [1]) so that 
(f, 1) > (g, m) and prove by induction on > that CC preserves computability and defined function symbols 
are computable. However, we cannot consider arbitrary DLQOs. Indeed, since we consider curried symbols 
and, by (app), adding arguments preserves termination, the number of arguments is not a valid termination 
criterion as shown by the following example: 

val : (N ^ N) ^ N; f : N ^ (N ^ N) 

val x —>■ XT. 
f x z ^ val (f x) 


where fa:z—>val (fa:)—>'fa:z—>■... 

We therefore need to consider DLQOs compatible with application: 


^®Note that the rule f (c x) —>■ a; means that c is injective and thus that, in a set-theoretical interpretation of types, the 
cardinality of the function space A —B is smaller than or equal to the cardinality of A, which is hardly possible if B is of 
cardinality greater than or equal to 2. 
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Definition 6 (J^-quasi-ordering). An T-quasi-ordering is a DLQO on S. A relation i? on E is: 

• compatible with application if, for all {f,lv), (g^rhw) € Smax, if,lv)Rig,fnw) whenever (f, l)i?(g, m); 

• stable by substitution if (f, la)R{g, rha) whenever (f, l)R{g, fh), a is away from FV(m) — FV(Z) and la, rha 
are computable. 

A simple way to get an .F-quasi-ordering compatible with application is to restrict comparisons to pairs 
(f, i) such that f is maximally applied in ft. For instance, given a quasi-ordering > on terms, the DLQO 
associated to: 

• the identity relation on J-] 

• for each equivalence class E modulo identity, the quasi-ordering >prod (resp. >mui); 

• for each symbol f, the identity function = t if f is maximally applied in ft; 

is an J^-quasi-ordering compatible with application, that is stable by substitution if > so is. For the sake of 
simplicity, we also denote such a DLQO by >prod (resp. >mui) and its strict part by >prod (resp. >mui)- 
Hence, —^-prod’ (^s)mui and, more generally, (—>■* >s)muLjare J^-quasi-orderings compatible with application 
and stable by substitution. For the sake of simplicity, we will denote (—>'^)prod by —^-prod- 

Definition 7 (Valid J^-quasi-ordering). A quasi-ordering > on terms is compatible with reduction if > U 
—^ is well-founded, where > is the strict part of >. It is valid if, moreover, > and the equivalence relation 
associated to > are both stable by substitution. 

An J^-quasi-ordering > is compatible with reduction if > U ^prod is well-founded on Emax, where > is the 
strict part of >. It is valid if, moreover, > and the equivalence relation associated to > are both stable by 
substitution and compatible with application. 

Note that > U — ^-prod is required to be well-founded on E^ax, that is, on pairs (f , t) such that f : T =► A, 
A G B and t G [T]. Note also that, by (RI), —^-prod is well-founded on computable terms. 

For instance, >prod and >mui are both valid if > so is. In particular, —and (—>■* Ds)n,ui are both 
valid (>s commutes with since —>■ is monotone). 

In the next subsection, we will give another example of valid J^-quasi-ordering. 

With a valid J^-quasi-ordering, we can add the operation of Figure ID 


Figure 4: Computability closure operations IV 


(rec) if g : M D, TO : M, to G CCf (Z) and (f, 1) > (g, to), then gm G CCf(Z) 


Lemma 3 Let > be a valid E-quasi-ordering, (f, t) G E^ax and assume that, for all {g,u) G Emax such 
that (f, i) > (g, u), gu is computable. Then, for all I, w, t and 6 such that t = Iw, 9 is computable, 
dom(0) C FV(t) — FV(Z) and t G CCf(Z), where CC is the smallest computability closure closed by the 
operations I to IV, we have td computable. 

Proof. We proceed as for Theorem S] by proving that, for all t G CCf(Z) and computable 9 such that 
dom(0) C FV(t) — FV(Z), t9 is computable, by induction on CC, but only detail the new case: 


is i,ijg smallest quasi-ordering containing both —> and >s. Its strict part on SN is —U —>* l>s. 
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(rec) We have rhO computable by the induction hypothesis. Since dom(0) C FV(gm) — FY{1), 16 = 1. Since 

> is stable by substitution, we have (f, > {g,md). Assume now that U = V ^ B and let u G |l7]. Since 

> is compatible with application, we have (f, Iw) > (g, rhdv). Hence, by assumption, grhOv is computable. 

Therefore, gm6 is computable. I 


Theorem 5 The relation terminates on well-typed terms if there are I G HBegRed^ and a valid 

J- -quasi-ordering > such that: 

• every non-basie undefined symbol is computable; 

• for every rule f/ —>■ r G 7^, we have r G CCf(/), where CC is the smallest computability closure closed by 
the operations I to IV. 

Proof. We follow the proof of Theorem [5] that, for all (f,t) G Umax with f G 'D{'R), every reduct t of ft is 

computable, but proceed by induction on > U —^-prod- There are two cases: 

• There is u such that t = fu and t —)-prod u- By (R2), u is computable. Therefore, by the induction 
hypothesis, fu is computable. 

• There are w, fl ^ r G TZ and a such that t = law and t = raw. Since r G CCf(l) and CC is stable by 

substitution (for > is stable by substitution), we have ra G CCf (la). Thus, by Lemma[3l ra is computable 
since, for all (g,u) G Smax, if (f,^ > (g,R)) then gu is computable by the induction hypothesis. ■ 


As a consequence, by taking the basic interpretation for /, we get: 


Corollary 3 The relation U terminates on well-typed terms if, for every rule fl ^ r G TZ, we have 
r G CCf(l), where CC is the smallest computability closure closed by the operations I to IV, and > is any 
J- -quasi-ordering valid wrt the basic interpretation. 


In t he first paper implicitly using the notion of compntability closure for higher-order rewriting .TOQll 


,T097aj . Jouannaud and Okada take the basic inter pretation for / and define for CC a schema generalizing 


Coder system T recursion schema on Peano integers God58l| to arbitrary first-order data types. This schema 
is included in any computability closure closed by the operations I to IV with the .F-q uasi-ord e ring (l>s )sta,t. 


defined in the next subsection. The present inductive formulation first appeared in BJ0991 BJO02l| . In 


Section l4.5.21 we provide various examples of systems that can be proved terminating by using this corollary. 


4 . 5 . 1 . Examples of valid E-quasi-orderings 

We have seen that a simple way to get an J^-quasi-ordering compatible with application is to only 
compare terms of base type. Another way is to always compa re the same fixed subset of arguments by using 
a particular case of arguments filtering system (APS) |AG00I |: 

Definition 8 (Arguments filtering system). A filter is a word on N — {0}. The arity of a filter (p = 
ki.. .kn is ||:/3||oo = max{0, ki,..., fc„}. A word w is compatible with a filter (p if |z(;| > ||i^||oo- We denote 
by the function mapping every word a G A* compatible with p = ki... kn to ati . ■. a/c„. An arguments 
filtering system (APS) is a function p providing, for each f G V(TZ), a filter p^ of arity ||:/5f||oo < Q^f- 


An APS describes, for each symbol f, which arguments, and in which order, these arguments must be 
compared. Por instance, if p^ = 322, then pf (tit 2 t 3 ...) = t3t2t2- Hence, when comparing (f, tif2t3) and 
(f, miU2R3'i*4), onejn fact co mpares ^372^2 and U 3 U 2 U 2 only. 

Following |Der here is an J^-quasi-ordering allowing both multiset and lexicographic compar¬ 

isons depending on a function stat : E {lex, mul}: 


Definition 9 (Status J^-quasi-ordering). Given a quasi-ordering > on terms, a quasi-ordering >jr on 
E, an APS p and a function stat : E {lex, mul} compatible with i.e. such that: 


17 
























• statf = statg whenever f g; 

• |v>f| = |(/3g| whenever f g and statf = lex; 
let >stat be the DLQO associated to: 

• the quasi-ordering >jr on 

• for each equivalence class E modulo of status mul (resp. lex), the quasi-ordering >niui (resp. >iex); 

• for each symbol f, the function = 

The -F-quasi-ordering >stat is valid whenever > so is. In particular, (—>■* > 5 )stat is valid. 


4-5.2. Examples of termination proofs based on computability closure 

With the above closure operations, one can already prove the termination of a large class of rewrite 
systems including: 


Godel system T God58l| : 


rec^ : N T ^ (N T => T) => T, for every type T 
rec^ z u V — >■ u 

rec^ {s x) u V —>■ v x (rec^ x u v) 


To give an example, let us detail why the right-hand side of the second rule is in the computability closure 
of the left-hand. We take the identity relation on T for >_f, FrecJ = 1 as AFS (only the first argument of 
rec^ will be used in comparisons), and stat^ecr = lex. Then, we have {s x,u,v} C CC = GGrecj(s x,u,v) 
by (arg), x G CC by (subterm-basic), rec^ x u v £ CC by (rec) for s a: Os x, and v x (rec^ x u v) £ CC 
by (app) twice. 

• Ackermann’s function: 

ack : N ^ N ^ N 

ack z n —)■ s n 
ack (s m) z —>■ ack m (s z) 
ack (s m) (s n) —>■ ack m (ack (s m) n) 


One can easily check that, for each rule, its right-hand side is in the computability closure of its left-hand 
side by taking (/Jack = 12 and statack = lex. 

• The following non-orthogonal set of rules for subtraction on unary natural numbers: 


- : N ^ N 


N 


z — X z 

X — Z —k X 

{sx)-(sy) x-y 

X — X z 


can also be proved terminating by taking :/Jsub = 1 and statsjb = lex. 

Here is an example of a rule for computing subtyping constraints on simple types that requires multiset 
comparisons (take (/?< = 12 and stat< = mul): 
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arrow :T=J>T=^>T; <:T^T=>C; A:C=^>C=>C 

arrow x y < arrow x' y' x' < x Ay < y' 


• Here is an example of mutually defined functions requiring a true quasi-ordering on function symbols 
(heightj heightp); 


nil : F; cons : T F =► F; leaf : T; node : F T; heightj : T => N; heightp : F => N 


heightp nil 
heightp (cons t f) 
heightj leaf 
heightj (node /) 


max (heightj t) (heightp /) 
z 

s (heightp /) 


• Finally, here is an example showing that the operations I to IV can already handle rules with matching 
on basic defined symbols (we will see the case of non-basic defined symbols in Section H771) : 


X : N ^ N ^ N 




z 

+ 

y 



(s 

x) 

-F 

y 

-A 

(x 

-F 

v) 

-F 

z 

-A 



z 

X 

y 

-A 


(s 

x) 

X 

y 

-A 

(x 

-F 

y) 

X 

z 

-A 


y 

x + {sy) 
x + {y + z) 

z 

{x xy)+y 
{x X z) + {y X z) 


4 . 6 . Handling higher-order subterms 

The closure operations presented so far do not enable us to deal with functions defined by induction on 
higher-order inductive types, that is, on inductive types with constructors taking functions as arguments. 
Here are some examples: 


The “addition” on the following (type theoretic) ordinal notation CPM88l| : 


zero : 0 sue :0 =a 0 lim:(N^0)^0 -F:0^0=^0 


zero -\-y 
(sue x) -\-y -A 
(lim x) -\-y -A 


y 

sue {x -F y) 

lim (An {x n) -F y) 


The computation of the prenex normal form in the predicate calculus [MN98I| : 


T,T:F; ^ : F F; A,V:F=^F^F; V, 3 : (T F) F 

(V P) A Q ^ V {\x (P x) A Q) 

- (V P) ^ 3 (Ax - (P x)) ... 




The list of lab els of a tree in breadth-first order using continuations 
the functions) |Hof95 1: 


nil : L: cons : N ^ L 


d : C; c : ((C ^ L) 

ex d -A nil 
ex (ex) —)• X ex 


(we only give the definition of one of 
L) —>■ C; ex : C L 


19 










Indeed, in all these examples, there are two problems. First, we need the higher-order arguments of a 
computable function-headed term to be computable, e.g. x in (lim x). Second, we need to have a DLQO in 
which (lim x) is bigger than (x n), where n is a bound variable. 

But we have already seen in Section 14.41 that the first property is not always satisfied. Fortunately, 
under some conditions, it is possible to define an interpretation I satisfying this property by using the fact 
that Re dT?, is a complete l attice ( as seen in Section [3]) on which, therefore, any monotone function has a 
fixpoint iTarSSl . Following Mat98 |. two different definitions are possible that we illustrate with the type 0 
of ordinals rj 


• An elimination-hased definition using recursor symbols. For instance, for 0, one can define the family of 
recursor symbols recQ indexed by T G T as follows: 


recr 


:O^T^(O^T^r)^ 


recA zero u V w 


recQ 

recr 


(sue x) 
(lim x) 


((N ^ 0) 

(reci^ 


(N =>r) ^T) 


u 

V X 

w X (An recQ {x n) u v w) 


X u V w) 
T 


and define /(O) as some fixpoint of the following monotone function: 


A ^ A]'^, 

A]'^, recQ t u V w G [A]'^} 


FoiX) = {t G £ I VT G r,VP G Red^,Vn G |Af ,Vu G [0 
Vw G [(N ^ 0) ^ (N ^ A) 

where A is a type constant distinct from 0 and 
J(A) = P, J(0) = X and J(N) = /(N) 


The computability of recg directly follows from the definition of /(O). And for proving that x is com¬ 
putable if (lima;) so is, it suffices to take T = 0 and w = XxXyx which is clearly computable. Indeed, 
in this case, recQ(lima;)Mt!Ui —>• wx{XnrecQ{xn)uvw) -G x and we can conclude by (R2). Finally, proving 
that constructors are computable is no more complicated. 

• An introduction-based definition using constructors only. In this approach, I{0) is defined as some fixpoint 
of the following monotone function: 

Po(X) = {t G SN I Vm, (t -G* sue u ^ u G X) A (t -A* lim m => u G |N 0]“^)} 
where J(0) = X and J(N) = /(N) 

In this case, the computability of constructor arguments directly follows from the definition of /(O). 


In Mat98l| . p. 116-117, Matthes proves that, when using saturated sets, the introduction-based interpre¬ 
tation is included into the elimination-based interpretation and provides an example of type for which the 
two interpretations are distinct, by using the fact that some saturated sets are not stable by reduction. It 
is not too difficult to check that this cannot happen with reducibility candidates. 

Anyway, in both cases, the monotony of Fq is due to the fact that 0 occurs only positively in the types of 
the arguments of the constructors of 0, knowing that A occurs positively in B A and negatively in A => B. 
More formally: 

Definition 10 (Positive and negative positions). Given a type T, the positive (resp. negative) posi¬ 
tions of T, Pos'''(T) (resp. Pos“(T)), are the subsets of {0,1}* defined as follows: 


^®These definitions can be generalized to any positive inductive type (see Definition llOl just after) iMen 8^. lBJO02l . 
^®We assume that B is infinite. Alternatively, we could consider type variables. 
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• Pos'''(B) = {e} 

• Pos"(B) = 0 

• Pos'''(T [/) = {Ow I w G Pos“(T)} U {Iw I w G Pos~^(U)} 

• Pos“(r =>?/) = {Ow I w G Pos'''(r)} U {Iw I w G Pos“(J7)} 

And the positions in a type T of the occurrences of a type constant B, Pos(B,T), are: 

• Pos(B, B) = {e} 

• Pos(B,C) = 0 if B ^ C 

• Pos(B, r => [/) = {Ow I w G Pos(B, T)} U {Iw I w G Pos(B, [/)} 


This leads to the f ollowing common restrictions one can for instance find in the Calculu s of I nductive 
Constructi ons tCIci^ CPM88 . Wer94 | and proof assistants based on CIC like Agda BDN09l| . Coq Coal4l| 


or Matita ARCTllI 


Definition 11 (Standard inductive system). Given a set 7Z of rewrite rules, the set of type constants 
S and the set of undefined function symbols fF — T>[Tt) (constructors) form a standard inductive system if 
there is a well-founded quasi-ordering >b on B such that, for all B G S, c G F — V{TV), c : T B, i G [1, |r|] 
and C occurring in Ti, either C <g B or else C B and Pos(C,ri) C Pos''’(Ti). 


Taking a quasi-ordering instead of an ordering allows us to deal with mutually defined inductive types. 
However, in this case, one has to reason on equivalence classes modulo ~b because, if B ~b C, then the 
interpretation of B and the interpretation of C have to be defined at the same time. 

In such a system, one can define / G HBegRed^ by induction on >b and, for each equivalence class 
E modulo as some fixpoint of a monotone function Fe (similar to the function Fq above) on the 
complete latti ce E -g - Redy^ ordered p oint-wi se by inclusion {I < J if, for all B G A, /(B) C J(B)). See 
Lemma 14 in BJO02l| or Section 6.3 in BlaOSj for more details about that. For each type constant B, /(B) 


is then defined as S\ 


[B]c 


,(B). 


With this interpretation, all the symbols f G — VIJZ) (constructors) are computable and one can add 
to the computability closure the operations of Figured 


Figure 5: Computability closure operations V for standard inductive systems (Definition lllll 


(undef) F-V{TZ) CGCfif) 

(subterm-undef) if gt G CCf{l), gt : B and g G F — T>(TZ), then {t} C CCf(Z) 


However, the stable subterm ordering is not sufficient to prove the termination of the systems given 
above. For instance, for the addition on 0, starting from an argument of the form (lim x), we have a 
recursive call with an argument of the form (x n) where n is a bound variable. Although a: is a subterm of 
(lim x), (x n) is not. In the case of continuations, this is even worse: starting from an argument of the form 
(c x), the function ex is applied to no argument but is itself argument of x... 

If, for Se, we take the smallest fixpoint of Fe (the s et of fixpoints is itself a complete lattice Tar55l| L 


then it can be obtained by transfinite iteration CC79l |: there is an ordinal a such that, for all B G if 


Se = F^ (Tb) where J-e is the smallest element of if —Redy^ and is defined by transfinite induction: 


fact, in CIC, inductive types are even restricted to strictly-positive i nductive types (see Definition I13II for termination 
may be lost when considering some polymorphic non-strictly positive types [CPM8^ . 
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. FUX) = X 

• F^+\X) = FEiFl^iX)) 

• F^{X) = 1J{-^b(-^) I a < [} if [ is a limit ordinal 

This provides us with a notion of rank to compare computable terms: 


Definition 12 (Rank of a computable term). The ranfc of a term tG/(B), rkB(t), is the smallest ordinal 
a such that t G F^^^ (T[B]^g)(B). Let ^b be the quasi-ordering on /(B) such that t ^b m if rkB(t) > rkB(M). 


Note that some terms may have a rank bigger than ui. For instance, with i : N 0 defined by the rules 
i z —>■ zero and i(s n) —suc(i n), we have rko(lim i) = w + 1. 

The relation ;^b is compatible with reduction since t u whenever t G [B] and t ^ u (reduction cannot 
increase the rank of a term by (R2)). However, it is not stable by substitution. For instance, s z >o y for 
rko(s z) = 1 and rko(?/) = 0, but s z <o s (s z) for rko(s (s z)) = 2. Restricting t u to the cases where 
FV(u) C FV(t) is not a solution since, with the addition on 0, we have to compare (lim x) and {x n). 
Instead, we will consider a sub-quasi-ordering of ^b due to Coquand Coa92l| that is valid (in a sense that 
will be precised after the definition) and, in which, (lim x) is bigger than (x n): 


Definition 13 (Structural subterm ordering). The i-th argument of c : T B is strictly positive if 
Ti is of the form t/ => C with C cs B and, for all D occurring in U, D <b B. Let l>|“ be the smallest 
sub-ordering of >s such that, for all c : T B, t : "T and i G [1, |t|], we have ct ti if the i-th argument 
of c is strictly positive. Given a term of the form fl, a term t : T is structurally bigger than a term u : U, 
written t >1^ u, if T and U are equivalent type constants and there are v and x G X — FV(Z) such that 
t >1“ V and u = vx^ Finally, let > 5 * be the reflexive closure of > 5 ^ 


For instance, lim x >s'"^ cc n for lim x : 0, x n : 0, lim x x and n G X — FV((lim x) -I- y). 

The relation >[’' is valid in the following generalized sense. First, ka >1^'^ ua whenever li >[’' u, 
dom(cr) C FV(1) and a is away from FY{u)—FY{l). Second, if k > 5 * u, k : B is computable, 0 is computable 
anddom/0) C FV(u)—FV (1), then uO : B is computable and k ;^b (seeLemma 18 in B,TO02l| or Lemma 54 


in |Blan5l| L Hence, by adapting Lemma d we can provide an instance of Theorem [Sable to handle functions 
defined by induction on the structural subterm ordering, by using a status /^-quasi-ordering compatible with 
the rank ordering (that is defined on terms of the same computability predicate only): 


Definition 14. An AFS ip and a map stat : F —{lex, mul} compatible with an equivalence relation 
on F are compatible with the rank ordering when the following conditions are satisfied: 

• if /? is an equivalence class modulo of status mul, then there is a constant type B^ such that, for all 
t G E with t :T => k and ipf = ki... kn, we have T^. = B^ for every i G [1, n]; 

• if /? is an equivalence class modulo csjr of status lex, then there is a sequence of constant types B^ such 
that, for all f G /? with f : T =4^ A, we have pj(T) = B^. 


Theorem 6 In a standard inductive system, the relation U -Gn terminates on well-typed terms if there 
are a well-founded guasi-ordering >jr on F, an AFS p and a status map stat compatible with and 
the rank ordering such that, for every rule fl ^ r G TZ, we have r G CCf(/), where CC is the smallest 
computability closure closed by the operations I to V with, in (rec), > = (— >'*>sOstatIEll 


could improve this definition by taking x G CCf(l) instead oi x £ X — FV(1) only IBJO02I . lBla06b|| . 
^^Here, we in fact consider a family of J^-quasi-orderings indexed by fl. 
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Proof. By adapting Lemma [31 we can follow the proof of Theorem |S] but proceed by induction on the 
DLQO )^stat associated to: 

• the quasi-ordering >jr on 

• for each equivalence class E modulo of status mul (resp. lex with |B^| = n), the quasi-ordering 
(^B®)mul (resp. (>-bE , • ■ • , )^B®)lex); 

• for each symbol f, the function = 

which is compatible with application and reduction. ■ 


Using this theorem, we can prove the termination of the first two examples given at the beginning of 
this section, or the rules defining the recursor on 0. For instance, if we take (/?+ = 1 and stat+ = lex, then 
{lim x,y} C CC = CC+(lim x,y) by (arg), n S CC by (var) for n G df —FV(lim x,y), x G CC by (subterm- 
undef), (x n) + y € CC by (rec) for lim x >s'"^ x n, Xn{x n)+y € CC by (abs) for n G — FV(lim x, y), 
and lim {\n{x n) -\-y) & CC by (undef). 

This is however not sufficient to orient the rules defining the function ex above since the type for continu¬ 
ations is not strictly p ositive. To deal with non -strictly positive types, one needs to consider type constants 
with size annotations Abe04 . BFG~*~04 , BR06 1. 


4.7. Handling matching on non-basic defined symbols 

We have already seen at the end of Section 14.51 that the rule (subterm-basic) allows to handle matching 
on basic defined symbols and not only undefined symbols (constructors) as in the previous section. Consider 
now the following set of rules on the strictly-positive type 0 of ordinals: 


+ : 0 0 ^ 0 


zero -G y 
(sue x) + y 
(lim x) + y 
{x + y) + z 


-t y 

sue {x + y) 

—lim (An {x n) -\- y) 
X + {y + z) 


For handling the last rule (associativity), we need x and y to be computable whenever a: -G y so is. But 
this does not follow from the interpretation of types in standard inductive systems which ensures that all 
the arguments of a computable term of the form H are computable if f is an undefined symbol (constructor) 
and some positivity conditions are satisfied. However, the introduction-based interpretation of types can be 
easily extended to include other symbols as long as the positivity conditions are satisfied. Moreover, these 
conditions can be checked for each argument independently. Hence the following definitions: 


Definition 15 (Accessible argument). Given a well-founded quasi-ordering >b on B, the set of acces¬ 
sible positions of a symbol f : T ^ B, Acc(f), is the set of integers i G [1, |T|] such that, for all C occurring 
in Ti, either C <g B or else C B and Pos(C,Ti) C Pos^(Ti). 

Let MiTZ) be the set of symbols f that are strict subterms of a left-hand side of a rule and for which 
Acc(f) is not empty {matched symbols with accessible arguments). 

Then, for /(O), we can take: 

Fo{X) = {t G SN I Vf G A4(7^), Vf, Vu,T(f) = f 0 A |f| = |u| A t fu ^ 

Vf G Acc(f),Ui G 

where J(0) = X and J(N) = /(N). But, for Fo{X) to satisfy the property (R3), we need to exclude from 
the set of neutral terms the terms of the form H with f G A4{71): 

Definition 16 (Neutral term - New definition). Given a set IZ of rewrite rules, a term is neutra^^ if 


a standard inductive system, all the arguments of a constructor are accessible (Acc(f) = [1, |T|] for every f € .F — X>(7^)). 
In this case, this new definition of Fq is equivalent to the introduction-based definition given in the previous section if one 
takes Acc(f) = 0 for every f G X>(7^), and assumes that AiilZ) = F — 

^“^This definition generalizes and replaces the one given in Definition [2] 
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it is of the form xv, [Xxt)uv or ff/ with f G 'D{'R) — Ai{TZ) and |i7| > af = sup{\l\ | 3r, —>■ r G TZ}. 

Then, we have the following property: 

Lemma 4 A term a : A. is computable iff all its reducts are computable and, for all f G A4(TZ), i G Acc(f) 
and a such that a = fa, Oi is computable. 

Proof. The only-if part directly follows from (R2) and the definition of the interpretation. For the if-part, 
first note that a G SN for all its reducts are computable and [A] C SN by (Rl). Now, let f G M{TZ), 
i G Acc(f) and a such that a —;■* fa. If a = fa, then a^ is computable by assumption. Otherwise, there is a' 
such that a ^ a' —>■* fa and, since a' is computable by assumption, Oi is computable. ■ 


Figure 6: Computability closure operations V 


(undef) C CCf(r) 

(subterm-acc) if gt G CCf(l), g G M(7Z), gt : B € S and i G Acc(g), then ti G CCf(^) 


We can then generalize the closure operations of Figure [5] for standard inductive systems to the closure 
operations of Figure [5] (we omit the proof). 

In addition, we can also give a syntacti c criterion for the c onditio n |B] = SN used in (undef-basic) and 
(subterm-basic) (see Lemma 16 in |B.I002 | and Lemma 49 in |Rlan,^ b 


Definition 17 (Basic type). A type constant is basic if its equivalence class modulo is basic. An 
equivalence class E is basic if for all B G A, f G MifR), f : T ^ B, * G Acc(f), Ti is a type constant C such 
that C G A or else C <g B and [C]~g is basic. 


In particular, all first-order data types (natural numbers, lists of natural numbers, trees, etc.) are basic. 


5. Rewriting modulo an equational theory 


Rewriting theory has been initially introduced as a decision tool for equational theories KB70l| . Indeed, 
an equational theory =£, i.e. the smallest congruence containing £, is decidable if there is a set 72. of rewrite 
rules such that terminates, is confluent, correct (72 C =£) and complete {£ C ='ji). Knuth and Bendix 
invented a completion procedure that, in case of success, builds such a set from 8 . This procedure consists 
in orienting the equations of £ (and those generated in the course of the procedure) in order to use them as 
rewrite rules. 

Yet, some equations or sets of equations, like commutativity, or associativity and commutativity together 
(associativity alone is orientable), are not orientable (no orientation leads to a terminating relation). A 
solution consists then in reasoning modulo these unorientable equations £ and c onsider class rewriting 
modulo £, i.e. the relatiorjH t =£—>- 7 ^ u if there is t' such that t =s t' and t' —>- 7 ^ u LB77 . HueS^- 

Another solution, preferred in practice since it makes rewriting more tractable, consists in considering 
rewriting with matching modulo £, i.e. the relation t -^Ti,S u if there are a position p G Pos(7), a rule 
1 > r G 72 and a substitution a such that t\p =g la and u = t[ra]p PS 8 IL lJK 86 l| . Efficient implementations 


of rewritin g with matching modulo some equational theories like associativity and commutativity have been 
developed Eke96l lKMni | that are for instance used to simulate and verify systems modeling chemical 
reactions or cryptographic protocols FI 


^®We use the relation and notation of iHueSOH and not the relation —>-]z/e — =£~t 7 j=£ used in lJK86l for it makes proofs 
simpler, but the two relations are equivalent from the point of view of termination. 

^®Indeed, the order of molecules in a chemical formula is irrelevant, and the order in which messages are received may be 
different from the order messages are sent. 
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However, we will only consider class rewriting in this paper. But, since rewriting with matching mod¬ 
ulo is included in class rewriting, the termination of class rewriting implies the termination of rewriting 
with matching modulo. More over, m any confluence results for rewriting with matching modulo relies on 
termination of class rewriting |,TK86l| . 

We now show how the notions of computability and computability closure can be adapted to prove the 
termination of the relation —U =e^v for an important class of equational theories =£. 

First note that, if there is a non-reaular'^ equation {e.g. a; x 0 = 0), then the relation =£^'ji does not 
termin ate. In deed, if there are g = d € £, x £ FV( 5 ) — FY{d) and I ^ r £ TZ, then d = d}^ =s g^. — g^ =£ 
dl = d 

Similarly, if there is a regular non-linea¥^ coUavsin^F^ equation {e.g. x Ax = x), then =£^n does not 
terminate either. Indeed, assume that t = x £ £ and x freely occurs at two positi ons p and q in t, and let 
t' = t[y]p where y ^ FV(t). lil £11, then I =£ t{l) = -£n i'{L)(P • ■ • |JK8d |. 

We will therefore restrict our attention to regular and non-collapsing equations, thus excluding regular, 
linear and collapsing equations like a; -f 0 = x, which are easily oriented though. 

We now extend the notion of neutral term by taking equations into account: 

Definition 18 (Neutral term modulo equations). Given a set TZ of rewrite rules of the form H — >■ r 
and a set £ of equations of the form U = gm, a term is neutral if it is of the form xv, {Xxt)uv or fu with 
f e 'D{TZ U f U £~^) — M{TZ U f U and |F| > Of = sup{\l\ \ 3r,fl ^ r £ TZU £ U £~^}. An equation 

Z = r is neutral if I is of the form fZ, r is of the form gm, and both Z and r are neutral. A set of equations £ 
is neutral if every equation of £ is neutral. 

Note that this definition generalizes Definition [11] for they are identical if f = 0. Note also that, if 
fll = r£ £, then fZ is not neutral. 

Next, we need the set of neutral terms to be stable by =£. It is not sufficient to require that, for each 
equation I = r £ £, I is neutral iff r is neutral, as shown by the following counter-example: for each equation 
Z = re£’ = {f = g,fx = h,gx 2 / = k}, Z is neutral iff r is neutral (f and g are not neutral, f x and h are 
neutral, and g x y and k are neutral), but f x =£ g x, f x is neutral and g x is not neutral because at = 1, 
Og — 2 and = ak — 0. However, it is sufficient to require £ to be neutral: 

Lemma 5 If £ is neutral, then the set of neutral terms is stable by =£. 

Proof. Note that =£ is the reflexive and transitive closure of ■£>■£ = -As U •<—£ (the symmetric closure of 
-Ag). We can therefore proceed by induction on the number of ££$ steps, and prove that the set of neutral 
terms is stable by £A£. So, let Z be a neutral term and assume that t £A£ t'. We check that t' is neutral: 

• XV <£>■£ t'. Since equations are of the form fZ = gm, t' is of the form xF' with F(0£)prodF'. 

• {\xt)uv £^£ t'. Since equations are of the form fZ = gm, t' is of the form (AxZ')uV with tuv{£^£)prodt'u'if. 

• fF £££ t' with f £ V{IZ yj £ yj £~^) and |F| > af. Either t' = Of and F('f->'£)prodF', or there are w, 

fZ = gm £ £ and a such that F = law and t' = grhaw. Since £ is neutral, |Z| > af and |m| > ag. Thus, t' 
is neutral. I 

Finally, we need SN(—:>) and thus SN(—5-,g) to be stable by =£. This can be achieved by requiring =£ to 
commute with -A^. Putting every thing together, we get: 


27; = r- is regular if FV(i) = FV(r). 

28; = j. is linear is both I and r are linear. 
29; = r- is collapsing if I £ X or r £ X 
^'^See Definition 1151 
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Definition 19 (Admissible theory). A set of equations £ is admissible if £ is made of regular, non¬ 
collapsing and neutral equations only, and =£ commutes with — 

In particular, =£ commutes with —if: 

Lemma 6 Given a set of equations £ of the form U = grh, =£ commutes with —if £ satisfies all the 
following conditions: 

• £ is linear: \/l = r £ £, I and r are linear; 

• £ is regular: Ml = r & £, FV(Z) = FV(r); 

• £ is algebraic: Ml = r G £, I and r are alaebraiW^. 

Proof. We proceed by induction on the number of Og-steps and show that, if t ^£ u v, then 
t -^p=£ V. The case -^£^p Q -^p=e is similar for conditions on equations are symmetric. 

• pffq. Then, t -^p-^£ v. 

• p < q. Then, there are I r and cr such that u\p = la and t = u[ra]p. Since r is algebraic and linear, 
there is x e FV(^) such that v = it[/cr']p, xa xa' and, for all y ^ x^ ya' = ya. Since r is regular and 
linear, t -^p ^[rcr'] v. 

• p = q. Not possible for equations are of the form fl = grh. 

• p > q. There are x, a, b such that u\q = {Xxa)b and v = u[a^]q. Since equations are of the form fZ = gm: 

— Either there is a' such that a -^£ a' and t = u[{\xa')b]q. Then, t -^p u[a'^^]q ■^£ v. 

— Or there is b' such that b —>•£ b' and t = u[{Xxa)b']q. Then, t -^p ^*£ v. ■ 

The condition of algebraicity could be slightly relaxed. For instance, the commutation of quantifiers 
necessa ry for ensuring the confluence of the rewrite rules computing the prenex normal form of a formula 
MN98l| commutes with -^p: 


M{XxM{XyPxy)) = M{XyM{XxPxy)) 

Now, we generalize the notion of computability to rewriting modulo some admissible theory: 

Definition 20 (Computability predicates for rewriting modulo equations). Given an admissible set 
of equations £ and a type T, let Red^^^^ be the set of all the sets P C such that: 

(Rl) P C SN(—>•) where —)• = -^p U =£^n', 

(R2) P is stable by —>■ U =£; 

(R3) if t : r is neutral and — (t) C P, then t G P. 

Note that Red ^/0 = Red^. We now check that the family (Red^/g)TeT has all the required properties: 


Lemma 7 If£ is an admissible set of equations and T £ T, then Red^^g is stable by non-empty intersection 
and admits SN^ as greatest element. Moreover, for all T,U G T, P € Red^/g and Q £ Red)^/g, oc (P, Q) £ 


Red 


T^U 

■n/e 


®^They contain no subterm of the form Xxt or xt. 
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Proof. The proof is similar to the one of Lemma [T] We only detail the cases that are different. We have 
SN^ € Red^yg for =£ commutes with and thus with For the stability by oc, we only detail (R3). 
Let T,U £ P £ Red^yg and Q £ Red^^y^^, v : T ^ U neutral with -^(v) C oc(P, Q), and t £ P. We 
prove that vt £ Q hy well-founded induction on t ordered by —)• (t G SN by (Rl)). Since vt is neutral, by 
(R3), it suffices to prove that, for all w' such that vt —>• w', we have w' £ Q. 

We first prove (a): there are v' and t' such that w' = v't' with either v —>■ v' and t =£ t', or v =£ v' and 
t ^ t'. We proceed by case on vt ^ w': 

• vt w'. Since v is neutral, it is not an abstraction and either w' = v't with v v', or w' = vt' with 
t t'. Hence, (a) is satisfied. 

• vt =£ w w'. We prove (a) by induction on the number of -H-g-steps. If vt = w, then we are done. 
Assume now that, vt 05 w =£^ti w'. 

The term w can neither be a variable nor an abstraction for equations are of the form fZ = gm. 

Assume that there are fZ = gm £ £ and a such that w = fZcr and vt = gma. Since vt = grfia, there are k 
and k such that fh = kk and v = gka. But, then, v cannot be neutral for |Zc| < \fh\ < ckg. 

Therefore, there are a and b such that w = ab, t =£ a and u =£ b. Now, by the induction hypothesis, 
there are v' and t' such that w' = v't' with either a -^-jz v' and b =£ t', or a =£ v' and b t'. Hence, 
(a) holds. 

If u' and t =£ t', then w' = v't' £ Q ior v' £ (x {P, Q) by assumption and t' £ P hy (R2). Otherwise, 
V =£ v' and t t'. Then, t' £ P hy (R2), and v' is neutral since neutral terms are stable by =£. Assume 
now that v' —> v". Since £ is admissible, =£ commutes with and thus with —>■. Hence, there is e such 
that V ^ e =£ v", and v" £ oc (P, Q) for e G oc (P, Q) by assumption and oc (P, Q) satisfies (R2). Therefore, 
—>■ (u') C oc (P, Q) and, by the induction hypothesis on t', w' = v't' £ Q. ■ 


Figure 7: Computability closure operations P 


(mod) if i G CCf(Z) and t =£ u, then u £ CCf(Z) 


We now show how to extend Theorem O 

Theorem 7 Given a set of rules TZ and an admissible set of equations £, the relation —>■ = —U =£^tz 
terminates on well-typed terms if there are I £ HBeBUGcI^yg and a valid P-quasi-ordering > containing 
(=£)prod such that: 

• every non-basic undefined symbol is computable; 

• for every equation fZ = gm £ £, rh £ CCf(Z), Z G CCg(m) and (f, Z) cs (g,m); 

• for every rule fZ —)> r G P, r G CCf(Z); 

where CC is the smallest computability closure closed by the operations I to IV, and P. 

Proof. We proceed as for TheoremOand show that, for all (f, ^ G Umax, every reduct t of H is computable, 
by induction on > U — ^-prod- There are two cases: 

1. t = fu with t (—>'/ 3 )prod u- By (R2), u is computable. Therefore, by the induction hypothesis, t is 
computable. 


27 



2. Otherwise, H =£ u —> 7 ?, t. We first prove by induction on the number of equational steps between ft and 
M, that u is of the form gu with u computable and (f,t) ~ (g,u). If there is no equational step, this is 
immediate. So, assume that ft =s u' u. By the induction hypothesis, u' is of the form gu with u 
computable and (f, ^ — (g,w). The conditions on rules being symmetric, the case of <—£ is similar to the 
one of -^£ for which there are two cases: 

(a) u = gv with u (^•£:)prod v- By (R2), v is computable and (g,u) — (g,'c) since cs contains (=£)prod- 
Therefore, by transitivity, (f, f) ~ (g,l?). 

(b) There are gl = f\rh G a and w such that u = law and u = hrfiaw. By assumption, m G CCg(Z) 
and (g,l) ~ (h,m). Since ~ is stable by substitution, {g,la) ~ Ih^fna). Since ~ is compatible with 
application, {g,law) ~ (h,mo-u;) and, by transitivity, (f,t) ~ {h,maw). Now, since > is stable by 
substitution, CC is stable by substitution and ma G CCg{la). Hence, by Lemma [3] and induction 
hypothesis, ma is computable. 

Now, for t, there are two possibilities: 

(a) t = gv with u (—)- 7 ?,)prod V- By (R2), v is computable and, by the induction hypothesis, t is computable. 

(b) There are gl ^ r G TZ, a and w such that u = law and t = raw. By assumption, r G CCg(Z). Since 

CC is stable by substitution, we have ra G CCg(lcr). Hence, by Lemma |3] and induction hypothesis, ra 
is computable. ■ 


5.1. T-quasi-ordering compatible with permutative theories 

We now define an J^-quasi-ordering satisfying the previous conditions for a gener al clas s of equational 
theories including permutativ^^ axioms like associativity and commutativity together LB77 1. It is based on 
the notion of alien subterm used when studying the preserva tion (modularity) of p roperties like confluence 


and termination of the disjoint union of two rewrite systems [Gra9lL lGra9 


irit y) 01 p r 
i3. lF.I94l| . 


Definition 21 (Alien subterms). Let A4 = M(SN) be the set of finite multisets on SN. Given a set 
E Q the E-alien subterms (Ll-aliens for short) of a multiset M G A4, Aliens£;(M), is the multiset of 
terms defined by induction on \>m as follows: 

• Aliens£;(0) = 0; 

• Aliens£;(M + N) = Aliens£;(M) + Aliens£;(A); 

• Aliens£;({|t|}) = Aliens_E({|^) if f = frand f G E, 

• Aliens£;({|t|}) = {|t|} otherwise. 

Given an equivalence on E, a set of equations £ is compatible with aliens if every equation of £ is 
of the form fl — gm with f g and Aliens[fj = Aliens [gj (m). 

Note that {|t|} \>m Aliens£;(t). For instance, AlienS{+}((a: + y) + ( 2 ; x (t + u))) = {|a;,y,z x (t + m)|}. 
Note also that, for all .F-quasi-orderings >, if £ is compatible with ~^-aliens then, for all equations 
fl = gm G £, (f, 1) ~ as required in Theorem!?] 

We now prove some properties of aliens: 


Lemma 8 If 9 is a substitution, then Aliens£:(M0) = (Aliens e{M)), where is defined by induc¬ 

tion on \>M o-s follows: 

• FbW = 0; 


equation / = r is permutative if every variable or function symbol has the same number of occurrences in I than it has 
in r. Such equations appear in algebra (permutativ e semi- groups), category theory (middle four exchange rule of Mac Lane), 
linear logic, the calculus of structures (medial rule) [Str07| . automated deduction, . .. 
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• + N) = ip%{M) + ip%{N); 

• = Aliens£;({|i|}) + (Aliens _e({|m|})) if x G X, x9 — ft and f S E; 

• <p^({|a|}) = {|a0|} otherwise. 

Proof. By induction on M with 1>m as well-founded relation. □ 

In the following, we assume given a quasi-ordering >jr on if, a set of equations £ compatible with 
~^-aliens, and an equivalence class E modulo 

Lemma 9 If M (=f)Ai N, then Aliens£;(M) Aliens£;(A^). 

Proof. We proceed by induction on M with as well-founded relation; 

• M = N = %. Then, Aliens£;(M) = 0 = Aliens£;(A^). 

u M = P -\- {|a|}, N = Q {|6|}, P (=s)m Q and a =s b. By the induction hypothesis. Aliens£;(P) {=£)m 
Aliens£;((5). We now prove that Aliens£;({|a|}) (=s)m Aliens£;({|6|}), by induction on the number of -O-f 
steps. And since conditions on equations are symmetric, it sufficient to prove that, if a b, then 
Aliens£;({|a|}) i=£)M Aliens£;({|5|}): 

— a = XU. Since equations are of the form fl = grii, there is v such that b = xv. Therefore, AliensE({|a[}) = 
{|a|} {=e)M {|^|} = Aliens£;({|6|}). 

— a = {\xs)u. Since equations are of the form fl — grh, there are t and v such that b = {Xxt)v. Therefore, 
Aliens£:({|a|}) = {|a|} {=£)m {|&[[ = Aliens£:({|6[[). 

— a = fu, b = fv and u (—>-£)prod v. 

* f G E. By the induction hypothesis, Aliens£;({|u[|-) (=£) 7 k Aliens£;({|t/|}). Therefore, AliensE({|a[[) 
(=£:)>t Aliens£;({|6|}). 

* f ^ E. Then, Aliens£;({|a[[) = {|o[[ {=£)m {|^[1- = Aliens£;({|6[l-). 

— There are w, fl = gffi G £ and a such that a = flaw and b = gifiaw. Since £ is compatible with 
~^-aliens, f ~jr g and Aliens£;(?) = Aliens£;(m). 

* f G E. Then, [f]~j. = E, Aliens£;({|a|}) = Aliens£;({|^cr[[) -I- Aliens£:(Rj) and AliensE({|6[[) = 
Aliens£;({|mtT[[)-|-Aliens£;(n;). By Lemma[51 AliensE({|ZtT|}) = ;p^(AliensE({|Z|})) and AliensE({|TO(T|}) = 
;p|;(AliensE({|TO|})). Therefore, Aliens£;({|a|}) = Aliens£;({|6|}). 

* f ^ E. Then, g^ E and Aliens£;({|a|}) = {|a|} {=e)M {|^[1- = Aliens£;({|6|}). ■ 

Lemma 10 If M (=£)m N, then ip%{M) (=£)m 

Proof. We proceed by induction on M with ]>m as well-founded relation: 

• M = N = %. Then, = 0 = ip%{N). 

• M = P-|-{|a|}, N = (3-l-{|6|}, P (=£)m Q and a =£ b. By the induction hypothesis, iPE(P) (=s)m V’e(Q)- 
We now prove that '.p%{a) {=£)m V%{b)'- 

— Assume that a = xu, x9 = fw and f G E. Since equations are of the form fl = grh, there is v such that 

b = XV and ■u(=£)prod^'- Hence, {|u|} (=£)m and, by Lemma[Hl Aliens_E({|w|}) (=£)m Aliens_E({|'y|})- 
By the induction hypothesis, c;p(Aliens£;(||u|})) (=£)m Wp(Aliens_ e(I|w|I))- Therefore, we have = 

AliensB({|w|}) + v?E(AliensB({|M|})) {=£)m AliensB({|w|}) + ;/7|;(Aliens£({|v|})) = 

— Otherwise, v?|(a) = {|a|} i=£)M {1^1} = ■ 
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The ordering on terms that compares the alien subterms with (>s)ai is not stable by substitution as 
shown by the following example: Aliens^} ({|a: 2 /|}) = {IxyH (i>s)a^ {|y|} = AlienS{f}({|j/|}) and AlienS{f}({|f?/|}) = 
{|y|}. Therefore, we consider the following restriction of > 5 : 

Definition 22. Let be the smallest sub-ordering of >s such that, for all f : T ^ t7, T: T and i € [1, |^], 
ft Os'® ti- Let Oj's be its reflexive closure. 

Lemma 11 Let >jr be a quasi-ordering on T and £ a set of equations such that: 

• £ is admissible and compatible with ^jr-aliens; 

• in each equivalence class modulo =£, the size of terms is bounded. 

Then, the DLQO > associated to: 

• the quasi-ordering on fF; 

• for each equivalence class E modulo zzjr, the quasi-ordering (=£ ^s'®) 7 vi:' 

• for each symbol f, the function 'ipfit) = Aliens[f]..^^({|tl}) iff is maximally applied in ft; 
is a valid F-quasi-ordering containing (=£)prod- 

Proof. The relation =£ Oj'® is well-founded since Of'® commutes with =£ (for =$ is monotone) and, in 
each equivalence class modulo =s, the size of terms is bounded (see the proof of Proposition 15 in |,TK 86 l |). 

Therefore, the strict part of > = {=£ >f'®) is > = (=f of'®), which is well-founded, and its associated 
equivalence relation is =£. 

Let > be the strict part of > and ~ be its associated equivalence relation. 

• Compatibility of > with application. The relation > is compatible with application for it only compares 
pairs (f, t) such that f is maximally applied in ft. 

• Compatibility of > with reduction. The relation of'® commutes with —>■ for —> is monotone. The relation 
=£ commutes with —for £ is admissible. The relation =£ trivially commutes with =£—^ 7 ^. Therefore, 

> commutes with —Since both > and —>■ are well-founded on SN, > U —>■ is well-founded on SN. Hence, 

> U —^-prod is well-founded on Emax- 

• Stability of ~ by substitution. It follows from the lemmas [51 El and HUl 

• Stability of > by substitution. Let E be an csjr-equivalence class, and assume that Aliens_E({|^) >m 

Aliens£;({|u|}). Then, there are M, P ^ N and Q such that Aliens_E({|^) = M -\- P, Aliens_E({|M|}) = 
N -\- Q, M (=£)Ad N and, (*) for all q € Q, there is p £ P such that p > q. Now, let 0 be a substitution. 
By Lemma [51 Aliens£;({|f0|}) = -\- p%{P) and Aliens_E({|M0|}) = p%{N) By Lemma [TUI 

(p^^{M) (=f )a 7 We now prove that <p%{P) >m Te(Q)- ^o this end, it suffices to prove that, for 

all q £ Q, there is p £ P such that V^|;({|p[l) >m that is, Aliens_E({|p0|}) >m Aliens_E({|(zfi'|}). 

So, let q £ Q. After (*), there is p £ P such that p > q. By definition of >, there are w and i £ [1, |u;|] 
such that p =£ kw and Wi >f'® g. Since equations are of the form fl = gfh, there are h and v such that 
p = hu. Since p is an A-alien, h ^ E and Aliens£;({|p0|}) = {|p0|}. Since > is stable by substitution, 
p9 > qO and thus {|p0|} >m By definition of aliens, {|g0|} (of'®) 7 vi Aliens_ e({| 9^1}). Therefore, by 

transitivity, Aliens£;({|p0[l) >m Aliens({| |}). ■ 

Note that the terms of an equivalence class modulo £ are of bounded size if, for instance, the equivalence 
classes modulo £ are of finite cardinality. This is in particular the case of associativity and commutativity 
together. 


30 



5.2. Example of termination proof 

As an example, we check that the conditions of Theorem [7] are satisfied by the set TZ of rules defining 
the addition on Peano integers given at the beginning of Section 14.51 and the following set £ of equations 
(associativity and commutativity): 


(x + y) + z = x + {y + z) 

X + y = y + X 

by taking the identity relation for and the .F-quasi-ordering > of Lemma 1111 

The set of equations £ is neutral. By Lemma [6l =£ commutes with —since £ is linear, regular and 
algebraic. Therefore, £ is admissible. 

The set of equations £ is compatible with ~_F-ahens since, for the associativity equation, we have + + 

and AhenS{+j({|x + 2 /, z|}) = {|a;, y, z|} = AlienS{_|_}({|x, y+ z[}), and for the commutativity equation, we have 
+ + and Aliens{+}({|x,y|}) = {|a;,y|} = AlienS{+}({|y,a:|}). 

Hence, by Lemma [TTl > is a valid J^-quasi-ordering containing (=£)prod for, in each equivalence class 
modulo =£, the size of terms is bounded. 

We now check the conditions on rules and equations Ifl 

• For the first rule defining addition, we have x G CC+(0,a:) by (arg). 

• For the second rule defining addition, we have a; + y G CC+(a;, sue y) by (rec) since Aliens{_|_} (a;, sue y) = 
{|a;,sue y|} >» Aliens{_|_}(a;, y) = {|a;,y|}, and thus sue (a: + y) G CC-|_(a;,sue y) by (undef) and (app). 

• For the commutativity equation, we have {y,a;} C CC+{a;,y) and {a:,y} C CC+(y,a:) by (arg). 

• Finally, for the associativity equation, we have x G CC+(a; + y,z) by (arg) and (subterm-acc), and 
y + z G CC+(a: + y,z) by (rec) since Aliens{+}(a; + y, z) = {|a;,y,z|} >m {|2/,^|} = Aliens{+} (y, z). 
Similarly, we have a; + y G CC+(a:, y + z) and z G CC+(a:, y + z). 


6. Rewriting with matching modulo /Sry 

In this section, we extend the results of Section |4] to rewriting with matching modulo /3y. Consider the 
following rewrite rule used for defining a formal derivation operator: 


sin, cos : R => R; x : R 
D (Aa; sin {F x)) 


R^R; D : (R^ R) ^ (R^ R) 
>■ Aa; (D F a;) X (cos {F x)) 


Using matching modulo o-equivalence only, this rule can be applied neither to D(sin) nor to D(Ax sin a;). 
But it can be applied to D(Aa;sin a;) if we use matching modulo /3-equivalence, since x (Aa;a:)a;lff| and to 
D(sin) if we use matching modulo / 3 ? 7 -equivalence , since sin Aa:sina:. 


Although matching modul o Py is decidable Sti09l| . it is of non-element ary com plexity [Sta79l| (while 
unification modulo Py Hue76l| and matching modulo P are both undecidable Loa03l| L There is however an 
important fragment for which the complexity is linear: the class of /3-normal y-long t erms in which every 
free variable is applied to distinct bound variables, introduced by Miller for AProlog |Mil91 


For 

instance, Aa;sin(Fa;), XxXyFyx and Xxx{Fx) are patterns (if they are in y-long form), while Fx and XxFxx 
are not patterns. However, in this paper, we will consider a slightly different class of terms: 


Definition 23 (Patterns). A term t is a pattern if t G PFV(t) where Vv is defined as follows: 


already remarked, the condition (f, 1) ~ (g, m) for every equation fl = f,rh fo llows from compatibility with ~jr-aliens. 
®'^In contrast with a common practice (Barendregt’s variable convention lBar92ll l. we often use the same variable name for 
both a bound and a free variable. Although it may be confusing at first sight, it has the advantage of avoiding some variable 
renamings. 
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• if t G Vv, then Xxt G Vv-{x}] 

• if f G f : T [/, f: T and t G Vv, then G Vv', 

• it X £ V, X : T U, t : T and t 77-reduces to pairwise distinct variables not in V, then xt G Vy- 


Our definition excludes Miller patterns where a bound variable is applied to a free variable like \xx{Fx), 
which is not very common in practice. On the other hand, our patterns do not need to be in //-long form. 

To apply the computability closure technique to rewriting with matching modulo Pt], we need to prove 
that, if H =i 3 r] tla ra and t are computable, then la is computable, so that ra is computable if 

Pot78l| and ? 7 -postponement (—>■«„ C CF58 . Tak95 |. for each 


r G CCf(Z). By confluence of 
i G [1, |Z|], there is Ui such that U - 


Ui =ri'£-*p ho'. By (R2), Ui is computable. Therefore, we are left to 
prove that, if Ui is computable and Ui =ri'£-*p then lia is computable. While computability is preserved 
by ry-equivalence (see Lemma[20]below), it cannot be the case for arbitrary /3-expansions because /3-expansion 
may i ntroduc e non-terminating subterms. 

In MilQlj . Section 9.1, Miller remarks that, if t =prf la, I is a pattern a la Miller, t and a are in /3-normal 
77 -long form, then t =i3ori lo', where is the restriction of to redexes of the form {\xt)x (or, by 
a-equivalence, of the form {Xxt)y with y £ X and t(x) = T{y)). So, when the left-hand sides of rules are 
patterns, matching modulo Py reduces to matching modulo poy. We now check that -^Porj terminates and 
is strongly confluent: 


Lemma 12 — terminates and is strongly confluent. 

Proof. The relation —terminates for it makes the size of terms decrease. Assume that t u v. 

• p#( 7 . Then, t v. 

• p = q. Then, t = v. 

• p > q. Then, there are a and a' such that u\q = Xxax, x ^ FV(a), v = u[a]q, a — a' and t = u[Xxa'x\q. 
Since FV(a') C FV(a), x ^ FV(a') and t -^ri u[a']q <—ri v. 

• p < q. By symmetry, t -£ri^Ti v- B 


Lemma 13 terminates and is strongly confluent on well-typed terms. 


Proof. The relation —>pqn terminates on well-typed terms for it is a sub-relation of -^pri which terminates 
on well-typed terms Pot78l| . Assume that t i^pgri u -^pgri v- If then t -^p^n u ^Porj v- 


• t u V. Then, t = v oi t V by Lemma [T^ 

• t ^rjU -^pg V. 

— p = q. Not possible. 

— p > q. There is a such that u\q = {Xxa)x and v = u[a]q. 

* p = qO. There is d such that a = dx, x ^ FV(d) and t = u[dx]q. Thus, t = v. 

* p > qO. There is a' such that a -£ri cl' and t = u[{Xxa')x\q. Thus, t -^pg u[a']q -i^ri v. 

* p> ql. Not possible. 

— p < q. There is a such that u\p = Xxax, x ^ FV(a) and t = u[a]p. 

* pO = There is b such that a = Xyb and v = u[ay]p. Since u is well-typed, t{x) = t{jj) and, by 
a-equivalence, we can assume wlog that y = x. Thus, t = v. 


35 Th is is exactly the situation of Nederpelt’s counter-example to the confluence of —untyped Church-style A-terms 
lNed7.-| . which is in fact a counter-example to the confluence of —>-/3 otj untyped Church-style A-terms. 
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* pO < q. There is a' such that a a' and v = u[Xxa'x]p. Thus, t u[a']p v. 

• t u Apg V. 

— p = q. Then, v = t. 

— p < q. There are a and a' such that u\p = (Xxa)x, t = u[a]p, a -^pg a' and v = u[{\xa')x]p. Thus, 
t -^pg u[a']p <-pg V. 

— p> q. By symmetry, t -^pg^pg v. ■ 

Hence, if t =pgp l(J, then t -^pon’^pgri Therefore, we could try to prove that computability is 

preserved by /3o-expansion, all the more so since that, for matching modulo a-equivalence, computability 
is preserved by /ieod-/3o-expansion as shown by Lemma [5] (a result that also holds with pattern matching 
modulo fir] under some conditions on TZ as we will see it in Lemma [T7] below). But this does not seem easy 
to prove in general for two reasons. 

First, a proof that u is computable whenever t ^pg u and t is computable, by induction on the size of 
t does not seem to go through. Indeed, assume that u = Xxs. Then, t = Xxr and r ^pg s. But Xxs is 
computable if, for all e G [^(a;)], s® is computable. Of course, r® is computable but we generally do not 
have r® -^pg s®. We therefore need to consider not /3o-expansion but a restricted form of /3-expansion that 
is stable by instantiation of the bound variables of a pattern: 

Definition 24 (Leaf-/3-expansion). The set LPos(t) of the (disjoint) leaf positions of a term t is defined 
as follows: 

• LPos(t) = G LPos(ti)} U ... U {lp\p G LPos(t„)} if t = f .. .tn and f G 

• LPos(t) = {Op|p G LPos(it)} if t = Xxu] 

• LPos(t) = {e} otherwise. 

Given a term v and a leaf position p G LPos(u), let the relation of ft-leaf-expansion wrt v at position p be 
the relation t <^p^v,p u if there are t, a, x, e, b such that t = and u = v\t\^[{Xxa)eb\p^ where q are 

all the leaf positions of v distinct from p. 

Second, since we do not consider rewriting on terms in /3-normal form, la can contain some arbitrary 
/3-redex {Xxa)b which, after some /3o?7-reductions, becomes a /3o-redex because b —>-pgrj x. However, if / is a 
pattern then such a /3-redex can only occur in a. Therefore, it is not needed to reduce it for checking that t 
matches I modulo ftrj. For the sake of simplicity, we will enforce this proper ty in the de finition of rewriting 
itself by using the notion of valuation used for defining rewriting in CRS^fll [KvOvR,^ |: 

Definition 25 (Valuation). A substitution a is valid wrt a term t if, for all p G LPos(t), x and <i,..., 
such that t\p = xti ...tn, there are pairwise distinct variables j/i,..., 2 /„ and a term a such that xa = 
Xyi... Aj/„a. Let the valuation of a term t by a substitution cr, written a{t), be the term: 

• Xxa{u) if t = Xxu and a is away from {a:}; 

• f a{ti).. .a{tn) \i t = Hi.. .tn, 

• «{//! t ti, ■ • ■, 2 /ti t tn} if f = xti . ■ .tn, XU = Xyi... Aj/nO and yi,... ,yn are pairwise distinct variables. 

Lemma 14 If I is a pattern and pi,... ,pn are the leaf positions of I then, for all substitutions a valid wrt 
I, we have a{l) ^*pp^p^ • ■ • ^cr. 


^®Note that -^r] cannot be postponed after —as shown by the following example: (\xa)(\yxy) {Xxa)x cl- 

^^In CRSs, is defined as the closure of 7^ by context and valuation (extended to all terms). 
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Proof. Let p be a leaf position of 1. By definition of patterns, there are terms t and pairwise distinct 
variables x, y such that l\p = xt, x G FV (1) and t —>■* y. Since a is valid wrt I, there is a such that xa = Xya 
and a{l)\p = a{yi n- ti,..., 2 /„ <„} (Aya)f = la\p. ■ 

Hence, valuation preserves typing: T(a(t)) = T{t). 

We now introduce our definition of rewriting with matching modulo Prj: 

Definition 26 (Rewriting with pattern matching modulo firf). Given a set TZ of rewrite rules of the 
form f^ r with fZ a pattern, let t -^n,pri u if there are p G Pos(t), I ^ r gTZ and a such that T{t\p) = t{ 1), 
a is valid wrt I, t\p =p a(l) and u = t[ra]p. 

Lemma 15 The relation —>' 7 ?,,/ 3 r( is monotone and stable by substitution. 

Proof. Monotony is straightforward. We check that it is stable by substitution. Assume that t u 

and let 0 be a substitution. There are p G Pos(t), I ^ r G TZ and cr such that T{t\p) = t{ 1), a is valid wrt I, 
t\p =p a{l) and u = t[ra]p. We have T{t9\p) = T{t\p) = r(Z), a9 valid wrt I and t9\p =p a{l)9. We now prove 
that d{l)9 =p u9(l). Let q G LPos(Z). Since I is a pattern, l\q = xt where x and tip are pairwise distinct 
variables and {tip} C BV(Z, q). Since tr is valid wrt I, there is a such that xa = Xya and a{l\q) =p a. Wlog 
we can assume that 9 is away from {y}. Therefore, xa9 — Xya9 and a{l\q)9 =p a9 =p a9{l\q). Therefore, 
t9 u9. ■ 

6.1. Definition of computability 

Computability is straightforwardly extended to this new form of rewriting as follows: 

Definition 27 (Computability predicates for rewriting with matching modulo firf). Given a set 7?. 
of rewrite rules of the form fZ —> r with fZ a pattern, a term is neutral if it is of the form xv, {Xxt)uv or fn 
with f G 'D{TZ) — Al(72.jH and Ini > Of = sup{\l\ | 3r, fZ ^ r G TZ}. Given a type T, let Red^_^^ be the set 
of all the sets P C such that: 

(HI) P G SN(—where — y = — yp U — ^'R.,/ 3 p'i 
(R2) P is stable by —i>; 

(R3) if Z : T is neutral and —5> (Z) C P, then t G P. 

Lemma 16 For all type T, Red^ is stable by non-empty intersection and admits SN^ as greatest ele¬ 
ment. Moreover, for all T,U gT, P G Red^_^^ and Q G Red^^^^, oc(P, Q) G Red^")^^. 

Proof. The proof is similar to the one of Lemma [TJ One can easily check the stability by non-empty 
intersection and the fact that SN^ G Red^^^. For the stability by oc, there is no change for (Rl) and 
(R2). We now detail (R3). Let T,U G T, P G Red^_^^, Q G Red^^^^, v :T ^ U neutral such that 
—>■ (n) C cx (P, Q) and t G P. We now show that nZ G Q by well-founded induction on Z with —)■ as well- 
founded relation (Z G SN by (Rl))- Since vt is neutral, by (R3), it suffices to prove that every reduct w of 
vt is in Q: 

• w = v't with V ^ v'. By assumption, u' G oc (P, Q). Therefore, w G Q. 

• w = vt' with Z —> t'. By the induction hypothesis, w G Q. 

• There are fl^rGlZ and a such that vt =p CT(fZ) = f fT(Z) and w = ra. By confluence of -^p, {vt)lp is 
of the form fm with |m| = |Z|. Since v is neutral, v is of the form xt, {Xxa)bt or gm with ag < |m|. We 
discuss these cases in turn: 


®®See Definition 1151 
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— V = xt. Then, v^ri is of the form xu. So, this case is not possible. 

— V = {Xxa)bt. Then, a cx with x ^ FV(c) and cbtu Hence, v v' = aj,t, v't {cx)\tu = 

cbtu (?(f0 v't —>• w. Therefore, w G Q since v' € oc(P,Q), t G P and Q satisfies (R2). 

— V = grh with ofg < |77i|. Then, g = f and \m\ < |mu| = |/|. Since v is neutral, af < |r7i|. By definition of 

Of, 1^1 < ckf- So, this case is not possible. ■ 

We now check that Lemma [5] still holds if the following condition is satisfied: 

Definition 28. A set TZ of rules is ^-complete if, for all rules I ^ r GTZ and types T, U such that I : T => U, 
there is x G X — FV{1) such that t{x) = T and: 

• lx ^ Sy G TZ ii r = Aj/sJ^ 

• lx ^ rx GTZ otherwise. 

For instance, TZ is /3-complete if, for every rule Z —>■ r G 7?., / is of base type. On the other hand, the set 
7^ = {f ^ Acca:} is not /3-complete since fee —>■ x ^ 7^. 

Lemma 17 Assume that TZ is /3-complete. Given T gT and P G Red^ (Axt)uv G P iff {Xxt)uv : T, 
tfv G P and u G SN. 

Proof. Assume that {Xxf)uv G P. By (R2), tl/v G P. By (Rl), {Xxt)uv G SN. Therefore, u G SN. 

Assume now that G P and u G SN. By (Rl), tfv G SN. Therefore, v G SN, G SN and t G SN. We 
now prove that, for all t,u,v G SN, {Xxt)uv G P, by induction on —)-prod- Since {Xxt)uv is neutral, by (R3), 
it suffices to prove that every reduct w of {Xxt)uv belongs to P. Since rules are of the form fl r, there 
are three possible cases: 

• w = tf.v. Then, w G P hy assumption. 

• w = {Xxt'/u'if and tuv —^-prod t'u'v'. Then, w G P hy the induction hypothesis. 

• There are U ^ r G TZ and a such that Xxt =y ^(f/) and w = rauv. By confluence of there is a such 
that t —>•* ax, X ^ FV(a) and a a{H). Wlog we can assume that x ^ FV(/) and a is away from {x}. 
Hence, t =y a{Ux). Since TZ is /3-complete, there are two cases: 

— r = Xys and fix Sy GTZ. Then, t -^n.pri SyCr. By monotony and stability by substitution, t^v 
{Sya/Z/v. Hence, {Sya)^v G P hy (R2). Therefore, by the induction hypothesis, {XxSya)uv G P. Wlog 
we can assume that a is away from {y}. Hence, {XxSyU/uv =a rauv. 

— r is not an abstraction and fix rx G TZ. Then, t (rx)a = rax. By monotony and stability by 

substitution, t'fv rauv. Hence, rauv G P hy (R2). ■ 

Corollary 4 Assume that TZ is /d-complete. Given T,U G T, P G and Q G Red^_^^, Xxt G 

oc (Q, P) iff Xxt : U ^ T and, for all u G Q, tf. G P. 

Proof. Assume that Xxt G(x{Q,P) and u G Q. Then, by definition of oc, (Axt)u G P. Therefore, by (R2), 
3“ G P. Assume now that, for all u G P, Vf G P. By definition of oc, Xxt Goc [Q, P) if, for all u G Q, 
{Xxt)u G P. By (Rl), u G SN. Therefore, by Lemma [T71 {Xxt)u G P. ■ 

But /3-completeness is not a real restriction from the point of view of termination since: 


®®This case is not necessary for Lemma llTI to hold but avoids adding rules whose right-hand sides are /3-redexes. 
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Lemma 18 For every (finite) set of rules S, there is a (finite) fi-complete set of rules TZ ^ S such that 
fZ ^ r € CCf(Z) for every fZ ^ r G 7^ */fZ —>■ r G CCf(Z) for every fZ —)• r G 5. 


Proof. Let Fp be the function on the powerset of such that, for all TZ C Fp(TZ) is the smallest 
set such that TZ C FplflZ) and, for all Z —>• r G 7^ and T, U such that I : T ^ U, there is x G X — FV(Z) 
such that t{x) = T, lx ^ s G FpiJZ) if r = Acts, an d lx —> • rx G FpfiJZ) otherwise. Since Fjs is extensive 
(j.e. TZ C FpOJZ)), by Hessenberg’s fixpoint theorem Hes09l| . Fp has a fixpoint TZ such that S FTZ. Since 
TZ = FpiTZ), TZ is /3-complete. 

Now, if 5 = {Zi —> ri,..., Z„ —>• r„} and, for every i G [1, n], Zi : T* ^ with G 6, then card(7?.) < 


Assume now that fZ —>• r G CCf (Z) for every fZ —>• r G 5, and that there are fl ^ r G TZ and T, U such 
that fl:T^U. By assumption, r G CCf(Z). Let now x G X — FV{1). Wlog, we can assume that x ^ BV(r). 
Hence, r G CCf{lx). By (arg), x G CCf(Zx). Therefore, by (app), rx G CCf(Zx). Now, if r = Xys, then 
Sy G CCf{lx) by (red). ■ 


Note moreover that S CTZ C —>- 5 —Therefore, U -^'R.,i 3 rj and -^p U have the same normal 

forms and, if ='jip (resp. =sp) is the smallest congruence containing -^p and TZ (resp. S), then =Tip is 
equal to =sp- 


6.2. Preservation of computability by rj-equivalence 

In this section, we prove that computability is preserved by ? 7 -equivalence if C -^Ti,/ 3 ri=ri- 

Then, we give sufficient conditions for this commutation property to hold. 


Lemma 19 Let > 7 - be the smallest transitive relation on types containing >g and such that T ^ U > 7 - T 
and T ^ U > 7 - U. The relation > 7 - is well-founded. 


Proof. Wlog we can assume that the symbol is not a type constant. Then, let >- be the smallest 
transitive relation on S U {=>} containing >s and such that ^ A for all A G B. The relation is well- 
founded for >e is w ell-foun ded. Hence, > 7 - is well-founded for it is included in the recursive path ordering 
(RPO) built over DerT^. ■ 


Lemma 20 Let TZ be a set of rules such that ■<— 7 —C -^.j^ py=y^ and assume that types are interpreted 
as in Section [13 If t : T is computable, t =y u and u : T, then u is computable. 

Proof. Note that, by Lemma IT^ t u. Since t and u are well-typed and —preserves typing, all 

terms between t and u are of type T. 

We then proceed by induction on (1) the type of t ordered with > 7 - (well-founded by Lemma fTOl). (2) the 
rank of t (see Definition na) if t is of base type, (3) t ordered by —>■ (t G SN by (HI)), and (4) the number 
of 07 -steps between t and u. 

If T = V O T', then u is computable if, for all computable v : V, uv : T' is computable. By monotony, 
tv =ri uv. Since tv : T' and T > 7 - T', uv is computable by the induction hypothesis. 

If t = It, then u is computable. Assume now that t =ri t' u. By the induction hypothesis, t' is 
computable. Therefore, we are left to prove the lemma when =7 is replaced by O 7 . 

Assume now that T is a type constant A. By Lemma |4l a term a : A is computable iff all its reducts are 
computable and, for all f G A4(TZ), i G Acc(f) and a such that a = fa, ai is computable. 

We first prove that, for all f G M.{TZ), i G Acc(f) and u such that u = fu, Ui : V B is computable. Since 
t is of base type and t GGy u = fu, there are t such that t = ft and t (■fG7)prod u- Now, Ui is computable if, 
for all computable v : V, UiV is computable. By monotony, tiV UiV and tiV has a type or a rank smaller 
than the type or rank of ft (for i G Acc(f)). Therefore, UiV is computable by the induction hypothesis. 

We now prove that all the reducts u of u are computable. 


36 








• t ^ri u 1)0 We now prove that there is t' such that t — t' —>■* v, so that we can conclude by the 
induction hypothesis: 

— In this case, t v- 

— p < q. There are a and a' such that t\p = Xxax, x ^ FV(a), u = t[a]p, a a' and v = t[a']p. Thus, 
t t[\xa'x\p V. 

— p > q. There are a and b such that u\q = {\xa)b and v = it[a^]g. 

* p > gl. There is d such that t = ^[(Arca)^]^ and d b. Thus, t u[a^] -^p v. 

* p = qO. Then, t = it[(Aa;(Axa)a;)&]q. Thus, t -^pg u -^p v. 

* p > qO. There is d such that t = u[{Xxd)b]q and d -^p a. Thus, t -^p -^p v. 

• t ^p u '^■r,,Pp V. We now prove that there is t' such that t -^-ji^pp t' — v, so that we can conclude by 
the induction hypothesis. 

— p#q. Then, t -^n,i 3 r, t' -^p v. 

— p>q. Then, t -^n,i 3 p v. 

— p < q. There are a and a' such that t\p = Xxax, x ^ FV(a), u = t[a]p, a -^n,P'n o-' and v = t[a']p. Thus, 
t -^Tz,0TI t[Xxa'x\p -^p V. 

• t ^p u ‘^n,pri V. By assumption, there is t' such that t ^ t' =p v, so that we can conclude by the 
induction hypothesis. 

• t ^p u ^p V. We now prove that, either v = t and v is computable for t is computable, or there is t' 
such that t -^p t' ■(—* V and we can conclude by the induction hypothesis: 

— p#g. Then, t -^p t' <—p v. 

— p = q. Not possible. 

— p > q. There are a and b such that u\q = {Xxa)b and v = M[a^]g. 

* p = qO. There is d such that a = dx, x ^ FV(d) and t = u[db]q. Thus, t = v. 

* p > qO. There is a' such that a -^p a' and t = u[{Xxa')b]q. Thus, t -^p u[a'^]g -^p v. 

* p > gl. There is 5' such that b -^p b' and t = u[{Xxa)b']q. Thus, t -^p u[a^]q ■(—* v. 

— p < q. There is a such that u\p = Xxax, x ^ FV(a) and t = u[a]p. 

* pO = q. There is b such that a = Xyb and v = u[Xxhy]p. As already mentioned in Lemma [T51 since u 
is well-typed, we can assume wlog that y = x. Thus, t = v. 

* pO < q. There is a' such that a -^p a' and v = u[Xxa'x\p. Thus, t -^p u[a']p <^p v. ■ 


In the previous proof, we have seen that -^p^u^pp C -^n,yjr^p- Hence, if we also have ^p^u^pp Q 
-^'R,i 3 ri=p, then ■^p^n,f 3 ri C — pp= 7 ]i ^ property that, after JMSj, we call: 


Definition 29. A relation R locally rj-commutes if R C i?+ =p. 


We now provide sufficient conditions for this property to hold: 


Definition 30. A set TZ of rules is rj-complete if, for all l,k,r,x such that Ik ^ r G TZ, k x and 
X G X — FV {1), we have: 


^°This case could be simplified and dealt with by (R2) if —t,, was included in —But, then, we would have to check Lemma 
1161 again. The present proof shows that this is not necessary. 
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• l^sGTZiir = sk', k' —>■* x and x ^ FV(s)0 

• I —>■ Xxr G TZ otherwise. 


Lemma 21 IfTZ is rj-complete, then <^r]^n,/ 3 ri Q -^Ti,i 3 ri=ri and -^n,pri locally ij-commutes. 

Proof. Assume that t u v- 

• p#q. Then, t -^tz,/3ti-^v 

• p> q. Then, t -^n, 0 ri v. 

• p < q. There is a such that u\p = Axax, x ^ FV(a) and t = u[o]p. 

— pOl < q. Not possible since the rules are of the form fl r. 

— pOO < q. There is a' such that v = M[Aa;a'a;]p and a -^n,pr^ a!. Then, t -Gn,pri 'a[a']p ^ v. 

— pO = q. There are fl^rGTZ and a such that ax =p a{fl) and v = u[\xra\p. By confluence of 
there are m and k such that I = mk, a =p tT(fTO) and x =p a{k). Since A: is a pattern, there is y G X 
such that k —>■* y and ya — >* x. Wlog we can assume that y = x. Let 0 be the restriction of a on 
FV(fr 7 i). Since x ^ FV(a) and the set of free variables of a term is invariant by =p, we have x ^ FV(to) 
and 9 away from {a;}. Now, since TZ is /^-complete, there are two cases: 

* r = sk', k' —>■* X, X ^ FV(s) and fm —>■ s G 72.. Then, a -^n,i 3 ri s0 and FV(s0) C FV(a). Since 
X ^ FV(a), X ^ FV(s0) and s9 \xs 6 x. Since x xa and x k' , we have x <—* k'a. Therefore, 
t -^n,i 3 rj^p M[Aa;s 6 *A:'cr] = v. 

* Otherwise, fm Xxr G 72. Hence, a {Xxr)9. Since 9 is away from {x}, {Xxr)9 = Xxr9. Since 

X = x9 xa, r9 <—* ra. Therefore, t v. ■ 

For instance, 72 = {fx —>■ x} is not ry-complete since f —>■ Axx ^ 72 and, indeed, the relation does 
not commute with -^n,Pp because of the non-joinable critical pair f ^ Axfx -^tz Axx. Adding the rule 
f —>■ Axx allows us to recover commutation. 

But ? 7 -completeness is not a real restriction from the point of view of termination since: 


Lemma 22 For every (finite) set of rules S, there is an rj-complete (finite) set of rules 72 A 5 such that, 
using the rules of Figure\^ fZ —>■ r G CCf(Z) for every U ^ r G TZ if f I ^ r G CCf(Z) for every fl ^ r G S. 


Proof. Let Fp be the function on the powerset of such that, for all 72 C T^, Fp{TZ) is the smallest set 
such that 72 C Fp{TZ) and, for all I, k, r, x such that Ik ^ r G TZ, k — >■* x and x G X — FV(Z), Z —>■ s G Fp{TZ) 
if r = sk', k' — )•* X and x ^ FV(s), and Z — Xxr G Fp{TZ) otherwise. 

Since Fp is extensive (be. 72 C Fp(TZ)), by Hessenberg’s fixpoint theorem Hes09l| . Fp has a fixpoint 72 
such that 5 C 72. Since 72 = FpiTZ), 72 is /^-complete. 

If 5 = {Zi ^ ri,...,Z„ —^ r„} and, for every i G [l,n], Z^ : T® => A.^ with A.; G B, then card(72) < 
n + E®bjf®|. 

Assume now that fZ —>■ r G CCf(Z) for every fZ —>• r G 5, and that there are flk —>• r G 72 and x G A—FV(Z) 
such that k —>•* x. By assumption, r G CCf(Zfc). By (var), x G CCf(Z). Therefore, by (eta), k G CCf(Z). Now, 


since x G X — FV(Z), we can get r G CCf(Z) by replacing, everywhere in the derivation proof of r G CCf(lk), 
CCf(lk) by CCf(Z), and the proofs of fc G CCf(ZA;) obtained with (arg), by the proof of fc G CCf(Z) obtained 
with (var) and (eta). Therefore, by (abs), Xxr G CCf(Z). Now, if r = sk' with k' —>* x and x ^ FV(s), then 
s G CCfil) by (eta). ■ 


^^This case is not necessary for Lemma 1201 to hold but avoids adding rules whose right-hand sides are jj-redexes. 
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The fact that the rules of Figure [5] are valid computability closure operations is proved in iBlaOn^ . 

Note that S CTZ C ■<—* S —>■*. Hence, if =n 0 rt (resp. =s 0 r]) the smallest congruence containing 
and TZ (resp. S), then =npr] is equal to =spr]- Moreover, “^<s./ 3 r/ have the same normal 

forms on T^-long terms. 

We have seen that termination of rewriting with matching modulo f3r] relies on commutation properties 
between and Such con ditions are well-known in first-order rewriting theory: the notion of 

compa tibility of Peterson and Stickel PS 8 l| . the notion of local ^-commutation of Jouannaud and Muno z 


■TM84l | and, more generally, the notion of local coherence modulo E of Jouannaud and Kirchner JK 86 l| . 


Similarly, the addition of extension rules to make a syste m compatible, locally commute or locally coherent 
is also well-known since Lankford and Ballantyne LB77 1. 


6.3. Preservation of computability by leaf-/3-expansion 

We now prove that computability is preserved by leaf-/3-expansion, but for patterns containing undefined 
symbols only. 

Definition 31. Let u be a term, p G LPos(u) and 9 be the leaf positions of v distinct from p. We say that a 
term t is valid wrt (u, p) if there are t and u such that t = and, for all y, a and b such that u = {Xya)b 

and \y\ = |5|, we have b G |T(y)] and, for all j G [1,161], either bjfj^ G BV{l,p) or FV( 6 j) fl BV(/,p) = 0. 

Note that, if Hs a pattern and a is valid wrt I, then every term t such that a{l) •(—^ ; ... ^ ^ t, 

where pi,... ,Pk are leaf positions of I, is valid wrt {l,pi ),..., {l,Pk) (for bjfri G BY{l,pi) in this case). 


Lemma 23 Let TZ be a (3 and rj-complete set of rules, and assume that types are interpreted as in Section 
o Let I be a term containing undefined symbols only, and let p be a leaf position of I. If t G |'r(0]j 
t rt and u is valid wrt (l,p), then u G [t(Z)J. 

Proof. Let S = |r(Z)]. Note that I does not need to be a pattern, a property that cannot be preserved 
when instantiating bound variables. In fact, the complete structure of I is not relevant. Because we look at 
leaf-/3-expansions, only the top part of I that is above the leaf positions is relevant. Hence, let ||_|| be the 
measure on terms defined as follows: 

• ||Z|| = 1-1 - ||to|| if I = Xzm, 

• ||?|| = 1 -l-sup{||Zi||,..., ||Z„||} if Z = Hi .. ./„ and n > 1, 

• ||Z|| = 0 otherwise. 

We prove the lemma by induction on (1) ||Z||, (2) t{1), (3) t ordered by — >■ (for t G SN by (Rl)), and (4) 
the terms b such that u\p = {Xya)b (for u is valid wrt {l,p)) ordered by —)• (for b G SN by (Rl)). We proceed 
by case on 1: 

• ||Z|| = 0. Then, there are a,x, e, b such that t = a®6 and u = {Xxa)eb. Since u is valid, e G |'r(a;)]. Hence, 
e G SN by (Rl). Therefore, by Lemma ITTl u G S. 

• I = Xzm. Then, there are r, s, q and M such that I : t{z) => M, t = Xzr, u = Xzs and r s. That 

is, S = oc (|t(z)], |M]) and there are t, a, x, e, b such that r = m\t^j:[a%b]q and s = m [^^[{Xxa)eb]q, 
where k are all the leaf positions of m distinct from q. By Corollary HI u G S' if, for all g G |'r( 2 :)], 
s§ = m[f§]^[(Xxa)§e§b§]g G |M]. So, let g G |t(z)]. By Corollary H rf = m[t§]^[(a^)§b§]g G |M]. 
Let bo = e. Since u is valid and z G BV(^,p), for all i G [0, |6|], either bi —)•* z and 6i(f) —)•* g, or 
z ^ FV(6i) and bi{^) = bi. Therefore, sf is valid. Wlog we can assume that x ^ z and x ^ FV( 5 ). 
Hence, (Aa;o)f = Xxa% and (a|)® = {a^x^. Therefore, rf /3 m q s% and, by the induction hypothesis (1), 
sfGlMl. 

• I = U with T(f) = T ^ U. We proceed by case on t{1): 
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— t{1) = V ^ W. By definition of computability, u € ^ if, for all v G [F], uv G |bb]- So, let v G |y]. 
Then, tv G |fT] and tv <—i 3 ,ix, 0 p uv. Moreover, uv is valid wrt {lx,Op) and ||Za;|| = ||Z||. Therefore, by 
the induction hypothesis (2), uv G [M^]- 

— t{1) G B. Since t u, there are i, q, t, u such that p = t = H, u = iu and ti Ui, that 

is, there are a, x, e, b such that ti\q = a%h and Ui\q = {\xa)eb. 

By Lemma m u € S' if all its reducts are in S and, if f e M{TZ) and i G Acc(f), then m G [TiJ. 
Assume that f e A4(7Z) and i G Acc(f). By Lemma |H ti G |Ti]. If U = Ui then m G [Ti]. Otherwise, 
ti Ui- Therefore, since Ui is valid wrt {li,q), by the induction hypothesis (I), ut G [Ti|. We now 

prove that, ii u ^ v, then v G S: 

* p#g. Then, t ^ t' ^p,i,p v. By (R2), t' G S. Since t' is valid wrt {l,p), by the induction hypothesis 
(3), vGS. 

* p > q. Not possible since I contains undefined symbols only. 

* There are U ^ r G TZ and 9 such that r(Axa) = r(fl), Xxa 9{U) and v = rOeb. Wlog we can 
assume that x ^ FV(fl) and 9 is away from {x}. Then, as already seen in the proof of Lemma [171 
a =n 9(flx). Since TZ is /3-complete, there are two cases: 

• There is s such that r = Axs. Then, flx^sGTZ and a s9. Hence, t ^ t' = u[{s9)^b]p ^p,i,p 

u[{Xxs9)eb]p = V. By (R2), t' G S. Since v is valid wrt {l,p), by the induction hypothesis (3), v G S. 

■ Otherwise, fix rx GTZ and a ’’’Qx. Hence, t ^ t' = u[{r9x)^b]p ■^/ 3 ,i,p u' = u[{Xxr9x)eh]p 

V. By (R2), t' G S. Since u' is valid wrt {l,p), by the induction hypothesis (3), u' G S. 
Therefore, by Lemma EITl v G S. 

* There is a' such that a ^ a' and v = u[(Axa')e6]p. Then, t t' = u[a'l.b]p ^p,i,p v. By (R2), t' G S. 
Since v is valid wrt {l,p), by the induction hypothesis (3), v G S. 

* There is e' such that e —>• e' and v = ?.i[(Axa)e'6]p. Then, t —>•* t' = u[a^b]p ^p,i,p v. By (R2), t' G S. 
Since u is valid wrt {l,p), e G |r(x)]. By (R2), e' G |t(x)|. Therefore, v is valid wrt {l,p) and, by the 
induction hypothesis (4), v G S. 

* There is b' such that b —^-prod b' and v = u[(Axa)e&']p. Then, t ^ t' = u[a%b']p t—i 3 ,i,p v. Since u is 

valid wrt {l,p), b are computable. Thus, by (R2), b' are computable and v is valid. Therefore, by the 
induction hypothesis (3), v is computable. ■ 

Finally, we check that (3 and 7 y-completion commute when left and right-hand sides are /Sr^-normal. 
Hence, any (finite) set of rules S whose left-hand and right-hand sides are /Sry-normal can be completed into 
a (finite) (3 and 77 -complete set of rules TZD S. 

Lemma 24 ^-completion (resp. r]-completion) preserves rj-completeness (resp. ^-completeness when left- 
hand and right-hand sides are fdrj-normal). 

Proof. • We will say that TZ is / 3 ? 7 -normal if, for every rule I ^ r G TZ, both I and r are ,577-normal. 
We first prove that the function Fq defined in the proof of Lemma [H] preserves / 3 -completeness and /377- 
normality. Let 7 ?. be a 7377-normal and / 3 -complete set of rules. We have to prove that Fq{TZ) is / 3 ? 7 -normal 
and / 3 -complete, that is, if there are / —>• r € Fq{TZ) and T,U G T such that I : T ^ U, then there is 
x G X — FV(/) such that t(x) = T and, either r = Xys and lx ^ Sy G Fq{TZ), or lx ^ rx G FqiJZ). Let 
I ^ r G FqiJZ) — TZ and assume that there is gk ^ d G TZ such that k —>■* x G X — ¥Y{g). Then, either: 

— d = sk', k' —>■* x G X — FV(s) and I ^ r = g ^ s. Since TZ is /377-normal, k = k' = x and r is not an 
abstraction. Therefore, lx ^ rx G Fq{TZ) since lx = gk, rx = sk' = d and gk ^ d G TZ. Moreover, I is 
/377-normal since I = g and gk is /377-normal, and r is /377-normal since r = s and d = sk' is /377-normal. 

— I ^ r = g ^ Xxd. Since TZ is / 377 -normal, k = x. Therefore, lx ^ d G Fq{TZ) since lx = gk and 
gk ^ d G TZ. Moreover, I is / 377 -normal since I = g and g is / 377 -normal, and r is / 377 -normal since 
r = Xxd, d is / 377 -normal and d is not of the form sk' with k' —>■* x G X — FV(s). 
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• We now prove that the function Fp defined in the proof of Lemma [T5] preserves ry-completeness. Let TZ 
be an 77 -complete set of rules. We have to prove that Fp{TZ) is ? 7 -complete, that is, ii Ik ^ r G Fp{TZ) and 
k —>•* X G X — FV(/) then, either r = tk', k' —>■* x G X — FV(t) and I G Fp{TZ), or I -G Xxr G FplTZ). 
Let I ^ r G FpiTZ) — TZ and assume that there are g ^ d GTZ and T,U gT such that g :T ^ U. Then, 
there \s x G X — FV((7) such that x : T and either: 

— d = Xys and Ik ^ r = gx ^ Sy. Wlog we can assume that y = x. If r = tk' and k' —>•* x G X — FV(t), 
then d is not /^ry-normal. Therefore, I -G Xxr G Fp(TZ) since I = g, r = s and g -G Xxs G TZ. 

— Ik ^ r = gx ^ dx. Therefore, I ^ d G FpiTZ) since I = g and g ^ d GTZ. ■ 

6 . 4 . Handling the subterms of a pattern 

We now show that Theorem [5] extends to rewriting with pattern matching modulo Pg: 


Figure 8: Computability closure operations VI 


(subterm-abs) if Xxt G CCf{l) and x G X — FV{1), then t G CCf(/) 
(subterm-app) if tx G CCf{l) and x G X — (FV(t) U FY{1)), then t G CCf(l) 
(eta) if < S CCf(l), < u and T(t) = t(u), then u G CCf(/) 


Theorem 8 Given a set of rules TZ that is both p and g-complete, the relation —U terminates on 

well-typed terms if there is an F-quasi-ordering > valid wrt the interpretation of Section such that, for 
every rule U ^ r G TZ, I are patterns containing undefined symbols only and r G CCf{l), where CC is the 
smallest computability closure closed by the operations I to VI. 

Proof. We proceed as for Theorem[5]by showing that, for all (f, i) G Umax, every reduct t of ft is computable, 
by well-founded induction on > U ^prod- There are two cases: 

• There is u such that t = fu and t —^-prod u. By (R2), u is computable. Therefore, by the induction 
hypothesis, fit is computable. 

• There are s, w, U ^ r G TZ and a such that t = sw, s =rj a(l) and t = raw. By Lemma [20l a(l) 
are computable. Let now i G [1, |1|] and pi,... ,pn be the leaf positions of h. By Lemma 1141 we have 

t—^ I ... G-*p I Ua. Since all the terms between aifi) and Ua are valid, by Lemma Ua is 
computable. Since r G CCf(l) and CC is stable by substitution (for > is stable by substitution), we have 
ra G C Cf(la). Now, Lemma [3] is easily extended with the rules of Figure [5] for destructuring patterns 
Bla00|| . Therefore, ra is computable since, for all (g,u) G Smax, if (f, ^ > (g,u), then gu is computable 
by the induction hypothesis. ■ 

For instance, let us check that these conditions are satisfied by the formal derivation rule given at the 
beginning of the section. Let I = Axsin(Fx) and assume that D >jr x. By (arg), I G CC = CCd( 0- By 
(var), X G CC. By (subterm-abs), sin(Fx) € CC. By (subterm-acc), Fx G CC. By (subterm-app), F G CC. 
By (undef), cos(Fx) G CC. By (rec), DFx G CC for I > 5 ^. By (rec), (DFx) x (cos(Fx)) G CC for D >jr x. 
Therefore, by (abs), Ax(DFx) x (cos(Fx)) S CC. 


6.5. Application to CRSs and HRSs 

CRSs KloHfll . IKvOvRQ.'I | can be seen as an extension of the untyped A-calculus with no object-level ap¬ 
plication symbol but, instead, symbols of fixed arity defined by rules using a matching mechanism equivalent 
to matching modulo Pg on Miller patterns. 
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In HRSs |Nip9ll. iMNQSj . one considers simply-typed A-terms in /3-normal ? 7 -long form with symbols 


defined by rules using Miller’s pattern-matching mechanism. 

Note that, although HRS terms are simply typed, one can easily encode the untyped A-calculus in it by 
considering an object-level application symbol. Similarly, in CRSs, one easily recove rs the u ntyped A-calculus 
by consideri ng an o bject-level application symbol. Such a CRS is called /3-CRS in Bla00l |. 


In HALs J09l|, Jouannaud and Okada consider arbitrary typed A-terms with function symbols of fixed 


arity defined by rewrite rules, and computation is defined as the combination of /3-reduction and rewriting. 

These three approaches can be seen as operating on the same term algebra (A-calculus with symbols 
of fixed arit y, which i s a sub-algebra of the one we consider here) with different reduction strategies wrt 
/3-reduction vOyRQ^: in HALs, there is no restriction; in CRSs, every rewrite step is followed by a /3- 
development of the substituted variables (see the notion of valuation in Definition 1^51) : finally, in HRSs, 
terms are /3-normalized. 

More precisely, in a CRS, a term is either a variable x, an abstraction Axt, or the application of a function 
symbol f to a fixed number of terms. A CRS term is therefore in /3-normal form. The set of CRS terms is a 
subset of the set of terms that is stable by reduction or expansion (if matching substitutions are restricted 
to CRS terms). Only rewrite rules can contain terms of the form xt, but every rewrite step is followed by 
a /3-development. Hence, the termination of a CRS can be reduced to the termination of the corresponding 
HAL, because a rewrite step in a CRS is included in the relation -^n,pri 0 — 

In an HRS, terms ar e in /3- normal 77 -long form and, after a rewrite step, terms are ,5-normalized and 
77 -expanded if necessary MN98l |. Hence, in an HRS, the reduction relation is where is the 

relation of v-exvansio'^ and i?' denotes normalization wrt R. Hence, our results can directly apply to 
HRSs if the set of terms in 77 -long form is stable by rewriting for, in this case, no 77 - expansi on is necessarjP^ 


This is in particular the case if the right-hand side of every rule is in 77 -long form Hue76l . Otherwise, one 
needs to extend our results by proving the termination of ^ U 
—U and 7?. is a set of algebraic rewrite rules). 


instead (see |CK9(il| for the case where 


7. Conclusion 


We have provided a new, more general, presentation of the notion of computability closure BJO02l| and 
how it can be extended to deal with different kinds of rewrite relations (rewriting modulo some equational 
theory and rewriting with matching modulo / 377 ) and applied to other frameworks for higher-order rewriting 
(Sectioning. In particular, for dealing with recursive function definitions, we introduced a new more general 
rule (Figure 0]) based on the notion of J^-quasi-ordering compatible with ap plication (Definition [ 6 ]) . 

Parts of this work have been formalized in the proof assistant Coq CoaI4l| : pure A-termj^. computability 
predicates on (untyped) A-terms, simply-typed A-terms using typing environments, the interpretation of 
types using accessible arg uments as in Section 14.71 and the smallest computability closure closed by the 
operations I, H, IV and V Blal,3 | ^ Therefore, the complete formalization of the results presented in this 
paper is not out of reach. In particular, the operations HI and VI, and the computability closure for rewriting 
modulo some equational theory. On the other hand, the computability closure for rewriting with matching 
modulo /377 seems more difficult. 

For the sake of simplicity, we have presented this work in Church simply-typed A-calculus |Chu40l| but, at 
the price of heavier notations, a special care for type variables, and assuming that af = sup{|/| | f/ —>■ r € TZ\ 


^^That is, the relation t—,, restricted to terms not of the f orm \xt and to contexts not of the form CllJn] ICK96l . 

^®The set of terms in r^-long form is stable by /3-red uction iHue zS- _ 

■^^Using named variables and explicit ^-equivalence [CF58| which is closer to informal practice than de Bruijn indices [dB72(| . 
^^The definitions and theorems without their proofs are available on http://color.inria.fr/doc/main.htinl. In particular, 
A-calculus is formalized in the files LTerm. v, LSubs. v, LAlpha. v, LBeta. v and LSimple. v; computability is formalized in LComp. v, 
LCompRewrite. V and LCompSimple. v; the interpretation of type constants as in Section wi\ is formalized in LCompInt.v; the 
notion of J^-quasi-ordering is formalized in LCall.v; and the notion of computability closure is formalized in LCompClos.v. As 
an example, Godel system T is proved terminating in LSystemT.v by using the lexicographic status .F-quasi-ordering (>s)iex- 
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is finitely these results can be extended to polymorphic an d depe ndent types, and type-level rewriting {e.g. 
strong elimination), following the techniques developed in Bla05 |. 

But the notion of computability closure has other interesting properties or applications: 


As shown in BlaOBa |, it has some important relationship with the notion of dependen cy pair 


can indeed be used to improve the static approach to higher-order dependency pairs [KISBO 


^AGonj i 

m- 


and 


• The notion of co r nputab ility closure and Jouannaud and Rubio’s higher-order recursive path ordering 
(HORPO) [jR99l ljR07 | share many similarities. The notion of computability closure is even used in 
HORPO for strengthening it. HORPO is potentially more powerful than CC because, when comparing 
the left-hand side of a rule fZ with its corresponding right-hand side r, in CC, the subterms of r must 
be compared with fZ itself while, in HORPO, the subterms of r may be compared with subterms of fZ. 
However, in Bla06bl| . I showed that HORPO is included in the monotone closure of the least fixpoint 
of the monotone function TZ >-;■ {(fZ,r) | r G CCf(Z),T(fZ) = T(r),FV(r) C FV(Z)} (where CC is the 
smallest comp utabilit y closure defined by the rules I to IV), and that Dershowitz’ first-order recursive 
path ordering Der82l| is equal to this fixpoint (when CC is restricted to first-order terms). This and the 
fact that HORPO could not handle the examples of Section ITBl motivated a series of papers culminating in 
the definition of the computability path or dering (CPO) su bsuming both HORPO and CC, but currently 
limited to matching modulo a-equivalence B,TR,08 . [b,TR,15 |. 


• In Section 14.61 we have seen that, on non-strictly positive inductive types, the computability closure can 
handle recursors (by using an elimination-based interpretation of types), but cannot handle arbitrary 
function definitions (e.g. the function ex). This can however be achieved by extending the type system 
with size annotations (interpreted as ranks) and using an J^-qu asi-orde ring comparing size annotations. 
This lin e of research was initiated in depen dently by Gim enez Gim96l| and Hug hes, Pareto and S abry 
HPS96l| , and further developed by Xi |Xi02l | , Abel Abe04 1, Barthe et al BFG+04 1 and myself Bla04 1. By 


considering e xplicit quantifications and c onstraints on size annotations, one can even handle conditional 
rewrite rules BR06 1. Moreover, in BR09l| , Roux and I sho wed that these d evelopments can to some extent 
be seen as an instance of higher-order semantic labeling Zan95L lHam07l| , a technique which consists in 
annotating function symbols with the semantics of theirs arguments in some model of the rewrite system. 


• In |.IR,06l| . using a complex notion of “neutralization” that requires the introduction of new function 
symbols, Jouannaud and Rubio provide a general method for building a reduction ordering for rewriting 
with matching modulo Pp on P-normal terms from a reduction ordering for rewriting with matching 
modulo a-equivalence on arbitrary terms, if the latter satisfies some conditions. Then, they provide a 
restriction of HORPO satisfying the required conditions. A precise comparison between this approach 
and the one developed in Section |5] remains to be done. It could perhaps shed some light on this notion 
of neutralization. 

Acknowledgements. The author thanks very much the anonymous referees for their very careful reading 
and many suggestions, and Ali Assaf and Ronan Saillard for their comments on Section [6l 


References 

[Abe04] A. Abel. Termination checking with types Theoretical Informatics and Applications, 38(4):277-319, 2004. 
[Abe06] A. Abel. A polymorphic lambda-calculus with sized higher-order types PhD thesis, Ludwig-Maximilians- 
Universitat Miinchen, Germany, 2006. 

[ACCL91] M. Abadi, L. Cardelli, P.-L. Curien, and J.-J. Levy. Explicit substitutions Journal of Functional Programming, 
1(4):375-416, 1991. 

[AGOOl T. Arts and J. Giesl. Termination of term rewriting using dependency pairs Theoretical Computer Science, 
236:133-178, 2000. 


Because, in this case, Qf may be infinite if 7^ is infinite, which may be the case if one consid ers the rewrite relation generated 
by a conditional rewrite system, or applies some semantic labeling to a finite rewrite system [Zan 


43 







































[ARCTll] 

[Bar84] 

[Bar92] 

[BDN09] 

[BFG97] 

[BFG+04] 

[BJ099] 

[BJO02] 

[BJR08] 

[BJR15] 

[BKR05] 

[BlaOO] 

[Bla03] 

[Bla04] 

[Bla05] 

[Bla06a] 

[Bla06b] 

[Bla07] 

[Blais] 

[BR06] 

[BR09] 

[BTG89] 

[BTG91] 

[CC79] 

[CF58] 

[CH84] 

[CH88] 

[Chu40] 

[CJ03] 

[CK96] 

[CKOla] 

[CKOlb] 


A. Asperti, W. Ricciotti, G. Sacerdoti Goen, and E. Tassi. The Matita interactive theorem prover In Proceedings 
of the 23rd International Conference on Automated Deduction, Lecture Notes in Computer Science 6803, 2011. 

H. Barendregt. The lambda calculus: its syntax and semantics. North-Holland, 2nd edition, 1984. 

H. Barendregt. Lambda calculi with types. In S. Abramsky, D. M. Gabbay, and T. S. E. Maibaum, editors. 

Handbook of logic in computer science. Volume 2. Background: computational structures, pages 117-309. Oxford 
University Press, 1992. 

A. Bove, P. Dybjer, and U. Norell. A brief overview of Agda - a functional language with dependent types In 
Proceedings of the 22nd International Conference on Theorem Proving in Higher Order Logics, Lecture Notes in 
Computer Science 5674, 2009. 

F. Barbanera, M. Fernandez, and H. Geuvers. Modularity of strong normalization in the algebraic-A-cube Journal 
of Functional Programming, 7(6):613-660, 1997. 

G. Barthe, M. J. Frade, E. Gimenez, L. Pinto, and T. Uustalu. Type-based termination of recursive definitions 
Mathematical Structures in Computer Science, 14(1):97-141, 2004. 

F. Blanqui, J.-P. Jouannaud, and M. Okada. The calculus of algebraic constructions In Proceedings of the 10th 
International Conference on Rewriting Techniques and Applications, Lecture Notes in Computer Science 1631, 

1999. 

F. Blanqui, J.-P. Jouannaud, and M. Okada. Inductive-data-type systems Theoretical Computer Science, 272:41- 

68 , 2002 . 

F. Blanqui, J.-P. Jouannaud, and A. Rubio. The computability path ordering: the end of a quest In Proceedings 
of the 22nd International Conference on Computer Science Logic, Lecture Notes in Computer Science 5213, 2008. 

Invited paper. 

F. Blanqui, J.-P. Jouannaud, and A. Rubio. The computability path ordering Logical Methods in Computer 
Science, ?(?):?-?, 2015. To appear. 

E. Bonelli, D. Kesner, and A. Rios. Relating higher-order and first-order rewriting Journal of Logic and Compu¬ 
tation, 15:901-947, 2005. 

F. Blanqui. Termination and confiuence of higher-order rewrite systems In Proceedings of the 11th International 
Conference on Rewriting Techniques and Applications, Lecture Notes in Computer Science 1833, 2000. 

F. Blanqui. Rewriting modulo in deduction modulo In Proceedings of the Ifth International Conference on 
Rewriting Techniques and Applications, Lecture Notes in Computer Science 2706, 2003. 

F. Blanqui. A type-based termination criterion for dependently-typed higher-order rewrite systems In Proceed¬ 
ings of the 15th International Conference on Rewriting Techniques and Applications, Lecture Notes in Computer 
Science 3091, 2004. 

F. Blanqui. Definitions by rewriting in the calculus of constructions Mathematical Structures in Computer Sci¬ 
ence, 15(l):37-92, 2005. 

F. Blanqui. Higher-order dependency pairs In 8th International Workshop on Termination, 2006. 

F. Blanqui. (HO)RPO revisited Technical Report 5972, INRIA, France, 2006. 

F. Blanqui. Computability closure: ten years later In Rewriting, Computation and Proof - Essays Dedicated to 
Jean-Pierre Jouannaud on the Occasion of His 60th Birthday, volume 4600 of Lecture Notes in Computer Science, 

2007. 

F. Blanqui. A formalization in Coq of the notion of computability closure for proving the termination of rewrite relations on A-terr 
2013. 

F. Blanqui and C. Riba. Combining typing and size constraints for checking the termination of higher-order conditional rewrite sys1 
In Proceedings of the 13th International Conference on Logic for Programming, Artificial Intelligence and Rea¬ 
soning, Lecture Notes in Computer Science 4246, 2006. 

F. Blanqui and C. Roux. On the relation between sized-types based termination and semantic labelling In Pro¬ 
ceedings of the 23rd International Conference on Computer Science Logic, Lecture Notes in Computer Science 
5771, 2009. 

V. Breazu-Tannen and J. Gallier. Polymorphic rewriting conserves algebraic strong normalization In Proceedings 
of the 16th International Colloquium on Automata, Languages and Programming, Lecture Notes in Computer 
Science 372, 1989. 

V. Breazu-Tannen and J. Gallier. Polymorphic rewriting conserves algebraic strong normalization Theoretical 
Computer Science, 83(1):3—28, 1991. 

P. Cousot and R. Cousot. Constructive versions of Tarski’s fixed point theorems Pacific Journal of Mathematics, 

82(l):43-57, 1979. 

H. B. Curry and R. Feys. Combinatory logic. North-Holland, 1958. 

T. Coquand and G. Huet. A theory of constructions, 1984. Paper presented at the International Symposium on 
Semantics of Data Types but not published in the proceedings. 

T. Coquand and G. Huet. The calculus of constructions Information and Computation, 76(2-3):95-120, 1988. 

A. Church. A formulation of the simple theory of types Journal of Symbolic Logic, 5:56—68, 1940. 

H. Comon and J.-P. Jouannaud. Les termes en logique et en programmation 2003. Lecture notes. 

R. Di Cosmo and D. Kesner. Combining algebraic rewriting, extensional lambda calculi, and fixpoints Theoretical 
Computer Science, 169(2):201-220, 1996. 

H. Cirstea and C. Kirchner. The rewriting calculus - part I Logic Journal of the Interest Group in Pure and 
applied Logic, 9(3):339-375, 2001. 

H. Cirstea and C. Kirchner. The rewriting calculus - part H Logic Journal of the Interest Croup in Pure and 


44 


applied Logic, 9(3):377-410, 2001. 

[Coq92] T. Coquand. Pattern matching with dependent types In Proceedings of the International Workshop on Types for 
Proofs and Programs, 1992. 

[Coql4] INRIA, France. The Coq reference manual, version 8.4pl5. 2014. 

[CPM88] T. Coquand and C. Paulin-Mohring. Inductively defined types In Proceedings of the International Conference 
on Computer Logic, Lecture Notes in Computer Science 417, 1988. 

[dB72] N. G. deBruijn. Lambda-calculus notation with nameless dummies: a tool for automatic formula manipulation with application to 
Indagationes Mathematicae, 34(5):381-392, 1972. 

[dB78] N. G. de Bruijn. A namefree lambda calculus with facilities for internal definition of expressions and segments 
TH-Report 78-WSK-03, Department of Mathematics, Technological University Eindhoven, NL, 1978. 

[Der79] N. Dershowitz. Orderings for term rewriting systems In Proceedings of the 20th IEEE Symposium on Foundations 
of Computer Science, 1979. 

[Der82] N. Dershowitz. Orderings for term rewriting systems Theoretical Computer Science, 17:279-301, 1982. 

[DJ90] N. Dershowitz and J.-P. Jouannaud. Rewrite systems. In J. van Leeuwen, editor, Handbook of Theoretical Computer 
Science. Volume B: formal models and methods, chapter 6, pages 243-320. North-Holland, 1990. 

[DM79] N. Dershowitz and Z. Manna. Proving termination with multiset orderings Communications of the ACM, 

22(8):465-476, 1979. 

[Dou91] D. Dougherty. Adding algebraic rewriting to the untyped lambda calculus In Proceedings of the 4th International 
Conference on Rewriting Techniques and Applications, Lecture Notes in Computer Science 488, 1991. 

[Dou92] D. Dougherty. Adding algebraic rewriting to the untyped lambda calculus Information and Computation, 

101(2):251-267, 1992. 

[Eke96] S. Eker. Fast matching in combinations of regular equational theories In Proceedings of the 1st International 
Workshop on Rewriting Logic and Applications, Electronic Notes in Theoretical Computer Science 4, 1996. 

[Erw96] M. Erwig. Active patterns In Proceedings of the 8th International Workshop on Implementation of Functional 
Languages, Lecture Notes in Computer Science 1268, 1996. 

[FJ94] M. Fernandez and J.-P. Jouannaud. Modular termination of term rewriting systems revisited In Proceedings of 
the 10th International Workshop on Specification of Abstract Data Types, Lecture Notes in Computer Science 
906, 1994. 

[FK12] C. Fuhs and C. Kop. Polynomial interpretations for higher-order rewriting In Proceedings of the 23rd Interna¬ 
tional Conference on Rewriting Techniques and Applications, Leibniz International Proceedings in Informatics 15, 

2012. 

[FPT99] M. Fiore, G. Plotkin, and D. Turi. Abstract syntax and variable binding In Proceedings of the Ifth IEEE 
Symposium on Logic in Computer Science, 1999. 

[Gal90] J. Gallier. On Girard’s “candidats de reductibilite”. In P.-G. Odifreddi, editor. Logic and Computer Science, 
number 31 in APIG Studies in Data Processing, pages 123—203. Academic Press, 1990. 

[Gan80] R. O. Gandy. Proofs of strong normalization. In J. R. Bindley and J. P. Seldin, editors, To H. B. Curry: Essays 
on Combinatory Logic, Lambda Calculus and Formalism, pages 457-477. Academic Press, 1980. 

[Gim96] E. Gimenez. Un calcul de constructions infinies et son application d la verification de systemes communiquants 
PhD thesis, ENS Lyon, France, 1996. 

[Gim98] E. Gimenez. Structural recursive definitions in type theory In Proceedings of the 25th International Colloquium 
on Automata, Languages and Programming, Lecture Notes in Computer Science 1443, 1998. 

[Gir71] J.-Y. Girard. Une extension de 1’interpretation de Godel a I’analyse et son application a I’elimination des coupures dans I’analyse e 
In J. Fenstad, editor. Proceedings of the 2nd Scandinavian Logic Symposium, volume 63 of Studies in Logic and 
the Foundations of Mathematics, pages 63—92. North-Holland, 1971. 

[Gir72] J.-Y. Girard. Interpretation fonctionelle et elimination des coupures dans Varithmetique d’ordre superieur. PhD 
thesis, Universite Paris 7, France, 1972. 

[GKK05] J. Glauert, D. Kesner, and Z. Khasidashvili. Expression reduction systems and extensions: an overview In Pro¬ 
cesses, Terms and Cycles: Steps to the Road of Infinity, Essays Dedicated to Jan Willem Klop, on the Occasion 
of His 60th Birthday, volume 3838 of Lecture Notes in Computer Science, 2005. 

[GLT88] J.-Y. Girard, Y. Lafont, and P. Taylor. Proofs and types Cambridge University Press, 1988. 

[God58] K. Godel. iiber ei ner bish er noch nicht beniitzte erweiterung des finiten standpunktes Dialectica, 12:280-287, 

1958. Reprinted in [God90|| . 

[God90] K. Godel. Collected works - voL 2: publications 1938-1974- Oxford University Press, 1990. 

[Gra91] B. Gramlich. A structural analysis of modular termination of term rewriting systems SEKI-Report SR-91-15, 

Fachbereich Informatik, Universitat Kaiserslautern, Germany, 1991. 

[Gra94] B. Gramlich. Generalized sufficient conditions for modular termination of rewriting Applicable Algebra in Engi¬ 
neering Communication and Computing, 5(3-4):131—158, 1994. 

[Ham06] M. Hamana. An initial algebra approach to term rewriting systems with variable binders Journal of Higher- 
Order and Symbolic Computation, 19(2-3):231-262, 2006. 

[Ham07] M. Hamana. Higher-order semantic labelling for inductive datatype systems In Proceedings of the 9th ACM 
SIGPLAN International Conference on Principles and Practice of Declarative Programming, 2007. 

[Hes09] G. Hessenberg. Kettentheorie and Wohlordnung Journal filr die reine und angewandte Mathematik, 135:81—133, 

1909. 

[Hof95] M. Hofmann. Approaches to recursive data types - a case study. Unpublished note cited in [MatOQ(| p. 61, 1995. 

[HPS96] J. Hughes, L. Pareto, and A. Sabry. Proving the correctness of reactive systems using sized types In Proceedings 


45 






[Hue76] 

[HueSO] 

[Jay04] 

[JB04] 

[JK 86 ] 

[JK09] 

[JM84] 

[J091] 

[J097a] 

[J097b] 

[JR99] 

[JR06] 

[JR07] 

[KB70] 

[Kes07] 

[Kha90] 

[KISB09] 

[KL80] 

[KI 08 O] 

[KMOl] 

[KvOdVOS] 

[KvOvR93] 

[LB77] 

[Loa03] 

[LSS92] 

[Mat98] 

[MatOO] 

[Men87] 

[Mil91] 

[MN98] 

[Ned73] 

[Nip91] 

[Oka89] 

[Par93] 


of the 23th ACM Symposium on Principles of Programming Languages, 1996. 

G. Huet. Resolution d’equations dans les langages d’ordre 1, 2, ..., ui, 1976. These d’Etat, Universite Paris 7, 

France. 

G. Huet. Gonfluent reductions: abstract properties and applications to term-rewriting systems Journal of the 
ACM, 27(4):797-821, 1980. 

C. B. Jay. The pattern calculus ACM Transactions on Programming Languages and Systems, 26(6):911-937, 

2004. 

N. D. Jones and N. Bohr. Termination analysis of the untyped lambda-calculus In Proceedings of the 15th Inter¬ 
national Conference on Rewriting Techniques and Applications, Lecture Notes in Computer Science 3091, 2004. 

J.-P. Jouannaud and H. Kirchner. Completion of a set of rules modulo a set of equations SIAM Journal on Com¬ 
puting, 15(4):1155-1194, 1986. 

C. B. Jay and Delia Kesner. First-class patterns Journal of Functional Programming, 19(2):191-225, 2009. 

J.-P. Jouannaud and M. Munoz. Termination of a set of rules modulo a set of equations In Proceedings of the 
7th International Conference on Automated Deduction, Lecture Notes in Computer Science 170, 1984. 

J.-P. Jouannaud and M. Okada. A computation model for executable higher-order algebraic specification languages 
In Proceedings of the 6th IEEE Symposium on Logic in Computer Science, 1991. 

J.-P. Jouannaud and M. Okada. Abstract data type systems Theoretical Computer Science, 173(2):349-391, 1997. 

J.-P. Jouannaud and M. Okada. Inductive data type systems: strong normalization and all that. Draft, 1997. 

J.-P. Jouannaud and A. Rubio. The higher-order recursive path ordering In Proceedings of the Ifth IEEE Sym¬ 
posium on Logic in Computer Science, 1999. 

J.-P. Jouannaud and A. Rubio. Higher-order orderings for normal rewriting In Proceedings of the 17th Interna¬ 
tional Conference on Rewriting Techniques and Applications, Lecture Notes in Computer Science 4098, 2006. 

J. -P. Jouannaud and A. Rubio. Polymorphic higher-order recursive path orderings Journal of the ACM, 54(1):1- 
48, 2007. 

D. Knuth and P. Bendix. Simple word problems in universal algebra In Computational problems in abstract 
alg ebra, P roceedings of a Conference held at Oxford in 1967, pages 263-297. Pergamon Press, 1970. Reproduced 
in ISW83I1 . 

D. Kesner. The theory of explicit substitutions revisited In Proceedings of the 21th International Conference on 
Computer Science Logic, Lecture Notes in Computer Science 4646, 2007. 

Z. Khasidashvili. Expression reduction systems Technical Report 36, I. Vekua Institute of Applied Mathematics 
of Tbilisi State University, 1990. 

K. Kusakari, Y. Isogai, M. Sakai, and F. Blanqui. Static dependency pair method based on strong computability for higher-order re\ 
lEICE Transactions on Information and Systems, E92-D(10):2007—2015, 2009. 

S. Kamin and J.-J. Levy. Attempts for generalizing the recursive path orderings Unpublished note, 1980. 

J. W. Klop. Combinatory reduction systems PhD thesis, Utrecht Universiteit, NL, 1980. Published as Mathe¬ 
matical Center Tract 129. 

H. Kirchner and P.-E. Moreau. Promoting rewriting to a programming language: a compiler for non-deterministic rewrite programs 
Journal of Functional Programming, 11(2):207-251, 2001. 

J. W. Klop, V. van Oostrom, and R. de Vrijer. Lambda calculus with patterns Theoretical Computer Science, 

398(1-3):16-31, 2008. 

J. W. Klop, V. van Oostrom, and F. van Raamsdonk. Combinatory reduction systems: introduction and survey 
Theoretical Computer Science, 121:279-308, 1993. 

D. Lankford and A. Ballantyne. Decision procedures for simple equational theories with commutative-associative axioms: complete 
Technical Report ATP-039, Automatic Theorem Proving Project, University of Texas, Austin, USA, 1977. 

R. Loader. Higher-order /3-matching is undecidable Logic Journal of the Interest Group in Pure and applied 
Logic, ll(l):51-68, 2003. 

C. Loria-Saenz and J. Steinbach. Termination of combined (rewrite and A-calculus) systems In Proceedings of the 
3rd International Workshop on Conditional and Typed Rewriting Systems, Lecture Notes in Computer Science 
656, 1992. 

R. Matthes. Extensions of system F by iteration and primitive recursion on monotone inductive types PhD the¬ 
sis, Ludwig Maximilians Universitat, Miinchen, Germany, 1998. 

R. Matthes. Lambda calculus: a case for inductive definitions 2000. 

N. P. Mendler. Inductive definition in type theory PhD thesis, Cornell University, USA, 1987. 

D. Miller. A logic programming language with lambda-abstraction, function variables, and simple unification 
Journal of Logic and Computation, l(4):497-536, 1991. 

R. Mayr and T. Nipkow. Higher-order rewrite systems and their confiuence Theoretical Computer Science, 

192(2):3-29, 1998. 

R. Nederpelt. Strong normalization in a typed lambda calculus with lambda structured types PhD thesis, Tech- 
nische Universiteit Eindhoven, NL, 1973. 

T. Nipkow. Higher-order critical pairs In Proceedings of the 6th IEEE Symposium on Logic in Computer Science, 

1991. 

M. Okada. Strong normalizability for the combined system of the typed lambda calculus and an arbitrary convergent term rewrite 
In Proceedings of the International Symposium on Symbolic and Algebraic Computation, 1989. 

M. Parigot. Strong normalization for second order classical natural deduction In Proceedings of the 8th IEEE 
Symposium on Logic in Computer Science, 1993. 


46 




[Par97] 

[Pau86] 

[Pot78] 

[PS81] 

[Qia93] 

[Rib07a] 

[Rib07b] 

[Roull] 

[San67] 

[Sta79] 

[Sti09] 

[Str07] 

[SW83] 

[SWSOl] 

[Tai67] 

[Tai75] 

[Tak95] 

[Tar55] 

[TeR03] 

[Toy87] 

[Tro73] 

[TullO] 

[Tur37] 

[vD80] 

[vdP96] 

[VM04] 

[vO90] 

[v094] 

[vOvR93] 

[vR96] 

[Wer94] 

[Xi02] 

[Zan95] 


M. Parigot. Proofs of strong normalization for second order classical natural deduction Journal of Symbolic 
Logic, 62(4):1461-1479, 1997. 

L. Paulson. Constructing recursion operators in intuitionistic type theory Journal of Symbolic Computation, 
2(4):325-355, 1986. 

G. Pottinger. Proofs of the normalization and Church-Rosser theorems for the typed A-calculus Notre Dame 
Journal of Formal Logic, 19(3):445—451, 1978. 

G. Peterson and M. Stickel. Gomplete sets of reductions for some equational theories Journal of the ACM, 
28(2):233-264, 1981. 

Z. Qian. Linear unification of higher-order patterns In Proceedings of the 5th International Joint Conference on 
Theory and Practice of Software Development, Lecture Notes in Computer Science 668, 1993. 

C. Riba. On the stability by union of reducibility candidates In Proceedings of the 10th International Conference 
on Foundations of Software Science and Computation Structures, Lecture Notes in Computer Science 4423, 2007. 

C. Riba. Strong normalization as safe interaction In Proceedings of the 22nd IEEE Symposium on Logic in 
Computer Science, 2007. 

C. Roux. Size-based termination: semantics and generalizations PhD thesis, Universite Henri Poincare, Nancy, 

France, 2011. 

L. E. Sanchis. Functionals defined by recursion Notre Dame Journal of Formal Logic, 8:161—174, 1967. 

R. Statman. The typed A-calculus is not elementary recursive Theoretical Computer Science, 9:73-81, 1979. 

C. Stirling. Decidability of higher-order matching. Logical Methods in Computer Science, 5(3):1—52, 2009. 

L. Strafiburger. A characterisation of Medial as rewriting rule In Proceedings of the 18th International Conference 
on Rewriting Techniques and Applications, Lecture Notes in Computer Science 4533, 2007. 

J. H. Siekmann and G. Wrightson, editors. Automation of reasoning. 2: classical papers on computational logic 1967-1970 
Symbolic computation. Springer, 1983. 

M. Sakai, Y. Watanabe, and T. Sakabe. An extension of dependency pair method for proving termination of 
higher-order rewrite systems. lEICE Transactions on Information and Systems, E84-D(8):1025—1032, 2001. 

W. W. Tait. Intensional interpretations of functionals of finite type I Journal of Symbolic Logic, 32(2):198-212, 

1967. 

W. W. Tait. A realizability interpretation of the theory of species In R. Parikh, editor. Proceedings of the 1972 
Logic Colloquium, volume 453 of Lecture Notes in Mathematics, 1975. 

M. Takahashi. Parallel reductions in A-calculus Information and Computation, 118:120-127, 1995. 

A. Tarski. A lattice-theoretical fixpoint theorem and its applications Pacific Journal of Mathematics, 5:285-309, 

1955. 

TeReSe. Term rewriting systems, volume 55 of Cambridge Tracts in Theoretical Computer Science. Cambridge 
University Press, 2003. 

Y. Toyama. Counterexamples to termination for the direct sum of term rewriting systems Information Process¬ 
ing Letters, 25(3):141-143, 1987. 

A. S. Troelstra. Models and Computability In A. S. Troelstra, editor, Metamathematical investigation of intu¬ 
itionistic arithmetic and analysis, volume 344 of Lecture Notes in Mathematics, pages 97—174. Springer, 1973. 

M. Tullsen. First class patterns In Proceedings of the 2nd International Symposium on Practical Aspects of 
Declarative Languages, Lecture Notes in Computer Science 1753, 2010. 

A. M. Turing. Computability and A-definability. Journal of Symbolic Logic, 2(153-163), 1937. 

D. van Daalen. The language theory of Automath PhD thesis, Eindhoven University of Technology, NL, 1980. 

J. van de Pol. Termination of higher-order rewrite systems PhD thesis, Utrecht Universiteit, NL, 1996. 

J. Vouillon and P.-A. Mellies. Semantic types: a fresh look at the ideal model for types In Proceedings of the 31st 
ACM Symposium on Principles of Programming Languages, 2004. 

V. van Oostrom. Lambda calculus with patterns Technical Report IR 228, Vrije Universiteit, Amsterdam, NL, 

1990. 

V. van Oostrom. Confluence for abstract and higher-order rewriting PhD thesis, Vrije Universiteit Amsterdam, 

NL, 1994. 

V. van Oostrom and F. van Raamsdonk. Comparing combinatory reduction systems and higher-order rewrite systems 
In Proceedings of the 1st International Workshop on Higher-Order Algebra, Logic and Term Rewriting, Lecture 
Notes in Computer Science 816, 1993. 

F. van Raamsdonk. Confluence and normalization for higher-order rewriting PhD thesis, Vrije University Ams¬ 
terdam, NL, 1996. 

B. Werner. Une theorie des constructions inductives PhD thesis, Universite Paris 7, France, 1994. 

H. Xi. Dependent types for program termination verification Journal of Higher-Order and Symbolic Computa¬ 
tion, 15(1):91-131, 2002. 

H. Zantema. Termination of term rewriting by semantic labelling Fundamenta Informaticae, 24:89—105, 1995. 


47 


